3 harden-referral-path: no
4 target-fetch-policy: "0 0 0 0 0"
8 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
11 SCENARIO_BEGIN Test scrub of insecure DNAME in answer section
14 RANGE_BEGIN 0 10000000
17 MATCH qname qtype opcode
23 . IN NS K.ROOT-SERVERS.NET.
25 K.ROOT-SERVERS.NET. IN A 193.0.14.129
29 MATCH qname qtype opcode
35 shortloop. IN TXT "shortloop end"
39 MATCH qname qtype opcode
43 K.ROOT-SERVERS.NET. IN A
45 K.ROOT-SERVERS.NET. IN A 193.0.14.129
49 MATCH qname qtype opcode
53 K.ROOT-SERVERS.NET. IN AAAA
58 MATCH subdomain opcode
59 ADJUST copy_id copy_query
64 com. IN NS a.gtld-servers.net.
66 a.gtld-servers.net. IN A 192.5.6.30
70 MATCH subdomain opcode
71 ADJUST copy_id copy_query
76 net. IN NS a.gtld-servers.net.
78 a.gtld-servers.net. IN A 192.5.6.30
82 MATCH subdomain opcode
83 ADJUST copy_id copy_query
88 x. IN NS a.gtld-servers.net.
90 a.gtld-servers.net. IN A 192.5.6.30
94 MATCH opcode subdomain
95 ADJUST copy_id copy_query
100 long. IN NS a.gtld-servers.net.
102 a.gtld-servers.net. IN A 192.5.6.30
106 MATCH opcode subdomain
107 ADJUST copy_id copy_query
110 60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. IN NS
112 60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. IN NS a.gtld-servers.net.
114 a.gtld-servers.net. IN A 192.5.6.30
118 MATCH qname qtype opcode
122 a.gtld-servers.net. IN A
124 a.gtld-servers.net. IN A 192.5.6.30
128 MATCH qname qtype opcode
132 a.gtld-servers.net. IN AAAA
136 ; end of root infrastucture
138 ; a.gtld-servers.net. (com. net. x.)
139 RANGE_BEGIN 0 10000000
142 MATCH qname qtype opcode
146 a.gtld-servers.net. IN A
148 a.gtld-servers.net. IN A 192.5.6.30
152 MATCH qname qtype opcode
156 a.gtld-servers.net. IN AAAA
161 MATCH qname qtype opcode
167 com. IN NS a.gtld-servers.net.
169 a.gtld-servers.net. IN A 192.5.6.30
173 MATCH qname qtype opcode
179 net. IN NS a.gtld-servers.net.
181 a.gtld-servers.net. IN A 192.5.6.30
185 MATCH opcode subdomain
186 ADJUST copy_id copy_query
191 example.com. IN NS ns1.example.com.
193 ns1.example.com. IN A 168.192.2.2
197 MATCH opcode subdomain
198 ADJUST copy_id copy_query
203 example.net. IN NS ns1.example.net.
205 ns1.example.net. IN A 168.192.3.3
209 MATCH qname qtype opcode
215 x. IN NS a.gtld-servers.net.
217 a.gtld-servers.net. IN A 192.5.6.30
221 MATCH qname qtype opcode
229 a.gtld-servers.net. IN A 192.5.6.30
234 ADJUST copy_id copy_query
237 shortloop.x.x. IN CNAME
240 shortloop.x.x. IN CNAME shortloop.x.
241 shortloop.x. IN CNAME shortloop.
246 ADJUST copy_id copy_query
249 shortloop.x. IN CNAME
252 shortloop.x. IN CNAME shortloop.
256 MATCH qname qtype opcode
260 60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. IN NS
262 60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. IN NS a.gtld-servers.net.
264 a.gtld-servers.net. IN A 192.5.6.30
268 MATCH qname qtype opcode
274 long. IN NS a.gtld-servers.net.
276 a.gtld-servers.net. IN A 192.5.6.30
279 ; DNAME at zone apex, allowed by RFC 6672 section 2.3
281 MATCH qname qtype opcode
287 long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
291 MATCH qname qtype opcode
297 long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
298 x.long. 3600 IN CNAME x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
299 x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. 3600 IN A 192.0.2.1
303 MATCH qname qtype opcode
307 x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. IN A
309 x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. 3600 IN A 192.0.2.1
314 ADJUST copy_id copy_query
319 long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
322 ; end of a.gtld-servers.net.
324 ; RFC 6672 section 2.2. The DNAME Substitution table tests
325 ;# QNAME owner DNAME target result
326 ;-- ---------------- -------------- -------------- -----------------
327 ;1 com. example.com. example.net. <no match>
328 ;2 example.com. example.com. example.net. [0]
329 ;3 a.example.com. example.com. example.net. a.example.net.
330 ;4 a.b.example.com. example.com. example.net. a.b.example.net.
331 ;5 ab.example.com. b.example.com. example.net. <no match>
332 ;6 foo.example.com. example.com. example.net. foo.example.net.
333 ;7 a.x.example.com. x.example.com. example.net. a.example.net.
334 ;8 a.example.com. example.com. y.example.net. a.y.example.net.
335 ;9 cyc.example.com. example.com. example.com. cyc.example.com.
336 ;10 cyc.example.com. example.com. c.example.com. cyc.c.example.com.
337 ;11 shortloop.x.x. x. . shortloop.x.
338 ;12 shortloop.x. x. . shortloop.
340 ; [0] The result depends on the QTYPE. If the QTYPE = DNAME, then
341 ; the result is "example.com.", else "<no match>".
343 ; Table 1. DNAME Substitution Examples
345 ; ; line no. 1 is mostly for authoritative server
346 ; ; line no. 2 QTYPE != DNAME
354 ; STEP 220202 CHECK_ANSWER
361 ; example.com. IN NS ns1.example.com.
364 ; ; line no. 2 QTYPE == DNAME
369 ; example.com. IN DNAME
372 ; STEP 220204 CHECK_ANSWER
374 ; MATCH rcode question answer
377 ; example.com. IN DNAME
379 ; example.com. IN DNAME example.net.
383 ; ;# QNAME owner DNAME target result
384 ; ;-- ---------------- -------------- -------------- -----------------
385 ; ;3 a.example.com. example.com. example.net. a.example.net.
391 ; a.example.com. IN A
394 ; STEP 220302 CHECK_ANSWER
396 ; MATCH rcode question answer
398 ; a.example.com. IN A
400 ; example.com. IN DNAME example.net.
401 ; a.example.com. IN CNAME a.example.net.
402 ; a.example.net. IN A 10.0.0.97
405 ; ;# QNAME owner DNAME target result
406 ; ;-- ---------------- -------------- -------------- -----------------
407 ; ;4 a.b.example.com. example.com. example.net. a.b.example.net.
413 ; a.b.example.com. IN A
416 ; STEP 220402 CHECK_ANSWER
418 ; MATCH rcode question answer
420 ; a.b.example.com. IN A
422 ; example.com. IN DNAME example.net.
423 ; a.b.example.com. IN CNAME a.b.example.net.
424 ; a.b.example.net. IN A 10.0.97.98
427 ; ;# QNAME owner DNAME target result
428 ; ;-- ---------------- -------------- -------------- -----------------
429 ; ;5 ab.example.com. b.example.com. example.net. <no match>
430 ; ;6 foo.example.com. example.com. example.net. foo.example.net.
432 ; ; line no. 5 is mostly for authoritative server
433 ; ; line no. 6 is basically the same as line no. 3
436 ; RANGE_BEGIN 220000 220699
437 ; ADDRESS 168.192.2.2
439 ; MATCH opcode qtype qname
441 ; REPLY QR AA NOERROR
445 ; example.com. IN NS ns1.example.com.
447 ; ns1.example.com. IN A 168.192.2.2
451 ; MATCH opcode qtype qname
453 ; REPLY QR AA NOERROR
455 ; ns1.example.com. IN A
457 ; ns1.example.com. IN A 168.192.2.2
461 ; MATCH opcode qtype qname
463 ; REPLY QR AA NOERROR
465 ; ns1.example.com. IN AAAA
471 ; MATCH opcode qtype qname
473 ; REPLY QR AA NOERROR
475 ; example.com. IN DNAME
477 ; example.com. IN DNAME example.net.
482 ; MATCH opcode qtype qname
484 ; REPLY QR AA NOERROR
486 ; a.example.com. IN A
488 ; example.com. IN DNAME example.net.
489 ; a.example.com. IN CNAME a.example.net.
494 ; MATCH opcode qtype qname
496 ; REPLY QR AA NOERROR
498 ; a.b.example.com. IN A
500 ; example.com. IN DNAME example.net.
501 ; a.b.example.com. IN CNAME a.b.example.net.
504 ; ; end of ns1.example.com.
507 ; ;# QNAME owner DNAME target result
508 ; ;-- ---------------- -------------- -------------- -----------------
509 ; ;7 a.x.example.com. x.example.com. example.net. a.example.net.
515 ; a.x.example.com. IN A
518 ; STEP 220702 CHECK_ANSWER
520 ; MATCH rcode question answer
522 ; a.x.example.com. IN A
524 ; x.example.com. IN DNAME example.net.
525 ; a.x.example.com. IN CNAME a.example.net.
526 ; a.example.net. IN A 10.0.0.97
530 ; RANGE_BEGIN 220700 220799
531 ; ADDRESS 168.192.2.2
533 ; MATCH opcode qtype qname
535 ; REPLY QR AA NOERROR
539 ; example.com. IN NS ns1.example.com.
541 ; ns1.example.com. IN A 168.192.2.2
545 ; MATCH opcode qtype qname
547 ; REPLY QR AA NOERROR
549 ; ns1.example.com. IN A
551 ; ns1.example.com. IN A 168.192.2.2
555 ; MATCH opcode qtype qname
557 ; REPLY QR AA NOERROR
559 ; ns1.example.com. IN AAAA
565 ; MATCH opcode qtype qname
567 ; REPLY QR AA NOERROR
569 ; example.com. IN DNAME
571 ; x.example.com. IN DNAME example.net.
575 ; MATCH opcode qtype qname
577 ; REPLY QR AA NOERROR
579 ; a.x.example.com. IN A
581 ; x.example.com. IN DNAME example.net.
582 ; a.x.example.com. IN CNAME a.example.net.
585 ; ; end of ns1.example.com.
587 ; ;# QNAME owner DNAME target result
588 ; ;-- ---------------- -------------- -------------- -----------------
589 ; ;8 a.example.com. example.com. y.example.net. a.y.example.net.
591 ; ; a.example.com. was renamed to a2.example.com. to avoid cache clashes
592 ; ; on the synthetized CNAME (caching CNAMEs is allowed by RFC 6672 section 3.4)
598 ; a2.example.com. IN A
601 ; STEP 220802 CHECK_ANSWER
603 ; MATCH rcode question answer
605 ; a2.example.com. IN A
607 ; example.com. IN DNAME y.example.net.
608 ; a2.example.com. IN CNAME a2.y.example.net.
609 ; a2.y.example.net. IN A 10.97.50.121
613 ; RANGE_BEGIN 220800 220899
614 ; ADDRESS 168.192.2.2
616 ; MATCH opcode qtype qname
618 ; REPLY QR AA NOERROR
622 ; example.com. IN NS ns1.example.com.
624 ; ns1.example.com. IN A 168.192.2.2
628 ; MATCH opcode qtype qname
630 ; REPLY QR AA NOERROR
632 ; ns1.example.com. IN A
634 ; ns1.example.com. IN A 168.192.2.2
638 ; MATCH opcode qtype qname
640 ; REPLY QR AA NOERROR
642 ; ns1.example.com. IN AAAA
648 ; MATCH opcode qtype qname
650 ; REPLY QR AA NOERROR
652 ; example.com. IN DNAME
654 ; example.com. IN DNAME y.example.net.
658 ; MATCH opcode qtype qname
660 ; REPLY QR AA NOERROR
662 ; a2.example.com. IN A
664 ; example.com. IN DNAME y.example.net.
665 ; a2.example.com. IN CNAME a2.y.example.net.
668 ; ; end of ns1.example.com.
671 ; ;# QNAME owner DNAME target result
672 ; ;-- ---------------- -------------- -------------- -----------------
673 ; ;9 cyc.example.com. example.com. example.com. cyc.example.com.
679 ; cyc.example.com. IN A
682 ; ; Expected result is defined by RFC 1034 section 3.6.2:
683 ; ; CNAME chains should be followed and CNAME loops signalled as an error
684 ; STEP 220902 CHECK_ANSWER
686 ; MATCH rcode question answer
689 ; cyc.example.com. IN A
693 ; RANGE_BEGIN 220900 220999
694 ; ADDRESS 168.192.2.2
696 ; MATCH opcode qtype qname
698 ; REPLY QR AA NOERROR
702 ; example.com. IN NS ns1.example.com.
704 ; ns1.example.com. IN A 168.192.2.2
708 ; MATCH opcode qtype qname
710 ; REPLY QR AA NOERROR
712 ; ns1.example.com. IN A
714 ; ns1.example.com. IN A 168.192.2.2
718 ; MATCH opcode qtype qname
720 ; REPLY QR AA NOERROR
722 ; ns1.example.com. IN AAAA
728 ; MATCH opcode qtype qname
730 ; REPLY QR AA NOERROR
732 ; example.com. IN DNAME
734 ; example.com. IN DNAME example.com.
738 ; MATCH opcode qtype qname
740 ; REPLY QR AA NOERROR
742 ; cyc.example.com. IN A
744 ; example.com. IN DNAME example.com.
745 ; cyc.example.com. IN CNAME cyc.example.com.
748 ; ; end of ns1.example.com.
750 ; ;# QNAME owner DNAME target result
751 ; ;-- ---------------- -------------- -------------- -----------------
752 ; ;10 cyc.example.com. example.com. c.example.com. cyc.c.example.com.
754 ; ; cyc.example.com. was renamed to cyc2.example.com. to avoid cache clashes
755 ; ; on the synthetized CNAME (caching CNAMEs is allowed by RFC 6672 section 3.4)
757 ; ; target c.example.com. was renamed to cyc2.example.net.
758 ; ; to limit number of pre-canned answers required for the test
764 ; cyc2.example.com. IN A
767 ; ; Expected result is defined by RFC 1034 section 3.6.2:
768 ; ; CNAME chains should be followed and CNAME loops signalled as an error
769 ; STEP 221002 CHECK_ANSWER
771 ; MATCH rcode question answer
774 ; cyc2.example.com. IN A
778 ; RANGE_BEGIN 221000 221099
779 ; ADDRESS 168.192.2.2
781 ; MATCH opcode qtype qname
783 ; REPLY QR AA NOERROR
787 ; example.com. IN NS ns1.example.com.
789 ; ns1.example.com. IN A 168.192.2.2
793 ; MATCH opcode qtype qname
795 ; REPLY QR AA NOERROR
797 ; ns1.example.com. IN A
799 ; ns1.example.com. IN A 168.192.2.2
803 ; MATCH opcode qtype qname
805 ; REPLY QR AA NOERROR
807 ; ns1.example.com. IN AAAA
813 ; MATCH opcode qtype qname
815 ; REPLY QR AA NOERROR
817 ; example.com. IN DNAME
819 ; example.com. IN DNAME cyc2.example.net.
823 ; MATCH opcode qtype qname
825 ; REPLY QR AA NOERROR
827 ; cyc2.example.com. IN A
829 ; example.com. IN DNAME cyc2.example.net.
830 ; cyc2.example.com. IN CNAME cyc2.cyc2.example.net.
833 ; ; end of ns1.example.com.
835 ; ;# QNAME owner DNAME target result
836 ; ;-- ---------------- -------------- -------------- -----------------
837 ; ;11 shortloop.x.x. x. . shortloop.x.
846 ; STEP 221102 CHECK_ANSWER
848 ; MATCH rcode question answer
850 ; shortloop.x.x. IN TXT
855 ; shortloop.x.x. IN CNAME shortloop.x.
856 ; shortloop.x. IN CNAME shortloop.
857 ; shortloop. IN TXT "shortloop end"
860 ; ;# QNAME owner DNAME target result
861 ; ;-- ---------------- -------------- -------------- -----------------
862 ; ;12 shortloop.x. x. . shortloop.
864 ; ; expire potentically cached CNAMEs for shortloop.x. from cache
865 ; STEP 221200 TIME_PASSES ELAPSE 10000
874 ; STEP 221202 CHECK_ANSWER
876 ; MATCH rcode question answer
878 ; shortloop.x. IN TXT
881 ; shortloop.x. IN CNAME shortloop.
882 ; shortloop. IN TXT "shortloop end"
886 ; ; ns1.example.net. (data shared by whole 22xxxx range)
887 ; RANGE_BEGIN 220000 229999
888 ; ADDRESS 168.192.3.3
890 ; MATCH opcode qtype qname
892 ; REPLY QR AA NOERROR
896 ; example.net. IN NS ns1.example.net.
898 ; example.net. IN A 168.192.3.3
902 ; MATCH opcode qtype qname
904 ; REPLY QR AA NOERROR
906 ; ns1.example.net. IN A
908 ; ns1.example.net. IN A 168.192.3.3
912 ; MATCH opcode qtype qname
914 ; REPLY QR AA NOERROR
916 ; ns1.example.net. IN AAAA
922 ; MATCH opcode qtype qname
924 ; REPLY QR AA NOERROR
926 ; a.example.net. IN A
928 ; a.example.net. IN A 10.0.0.97
933 ; MATCH opcode qtype qname
935 ; REPLY QR AA NOERROR
937 ; a.b.example.net. IN A
939 ; a.b.example.net. IN A 10.0.97.98
943 ; MATCH opcode qtype qname
945 ; REPLY QR AA NOERROR
947 ; a2.y.example.net. IN A
949 ; a2.y.example.net. IN A 10.97.50.121
954 ; MATCH opcode qtype qname
956 ; REPLY QR AA NOERROR
958 ; cyc2.example.net. IN DNAME
960 ; cyc2.example.net. IN DNAME example.com.
964 ; MATCH opcode qtype qname
966 ; REPLY QR AA NOERROR
968 ; cyc2.cyc2.example.net. IN A
970 ; cyc2.example.net. IN DNAME example.com.
971 ; cyc2.cyc2.example.com. IN CNAME cyc2.example.com.
974 ; ; end of ns1.example.net.
977 ; ; RFC 6672 section 2.2: YXDOMAIN answers for too long results for substitution
978 ; ; RFC 6672 section 2.3: DNAME can be at zone apex: zone apex = long.
986 ; ; query returning maximal permissible length - should work
987 ; STEP 229002 CHECK_ANSWER
989 ; MATCH rcode question answer
993 ; long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
994 ; x.long. 3600 IN CNAME x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
995 ; x.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. 3600 IN A 192.0.2.1
998 ; result of substitution has too long name
999 ; YXDOMAIN should be propagated to the client
1000 ; Unbound SEVFAILs: https://www.ietf.org/mail-archive/web/dnsext/current/msg11282.html
1008 STEP 229004 CHECK_ANSWER
1010 MATCH rcode question answer
1015 long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
1018 ; ; YXDOMAIN should work even if the cache is empty
1019 ; STEP 229005 TIME_PASSES ELAPSE 4000
1028 ; STEP 229007 CHECK_ANSWER
1030 ; MATCH rcode question answer
1035 ; long. 3600 IN DNAME 63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.63o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.60o-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.