; This is a comment. ; config options go here. server: minimal-responses: no forward-zone: name: "." forward-addr: 216.0.0.1 CONFIG_END SCENARIO_BEGIN Untrusted rrset not used for update STEP 1 QUERY ENTRY_BEGIN REPLY RD SECTION QUESTION www.example.com. IN A ENTRY_END ; the query is sent to the forwarder - no cache yet. STEP 2 CHECK_OUT_QUERY ENTRY_BEGIN MATCH qname qtype opcode SECTION QUESTION www.example.com. IN A ENTRY_END STEP 3 REPLY ENTRY_BEGIN MATCH opcode qtype qname ADJUST copy_id ; authoritative answer REPLY QR AA RD RA NOERROR SECTION QUESTION www.example.com. IN A SECTION ANSWER www.example.com. IN A 10.20.30.40 SECTION AUTHORITY example.com. IN NS ns.example.com. SECTION ADDITIONAL ns.example.com. IN A 10.20.30.50 ENTRY_END STEP 4 CHECK_ANSWER ENTRY_BEGIN MATCH all REPLY QR RD RA SECTION QUESTION www.example.com. IN A SECTION ANSWER www.example.com. IN A 10.20.30.40 SECTION AUTHORITY example.com. IN NS ns.example.com. SECTION ADDITIONAL ns.example.com. IN A 10.20.30.50 ENTRY_END ; another query passes along STEP 6 QUERY ENTRY_BEGIN REPLY RD SECTION QUESTION bla.example.com. IN A ENTRY_END STEP 7 CHECK_OUT_QUERY ENTRY_BEGIN MATCH qname qtype opcode SECTION QUESTION bla.example.com. IN A ENTRY_END STEP 8 REPLY ; This answer has updated information on ns2.example.com. ; But it is nerfed into the additional. Must be ignored per rfc2181. ENTRY_BEGIN MATCH opcode qtype qname ADJUST copy_id ; authoritative answer REPLY QR AA RD RA NOERROR SECTION QUESTION bla.example.com. IN A SECTION ANSWER bla.example.com. IN A 10.20.30.140 SECTION AUTHORITY SECTION ADDITIONAL example.com. IN NS ns.eeeek.com. example.com. IN NS ns2.eeeek.com. ns.eeeek.com. IN A 55.44.33.22 ns2.eeeek.com. IN A 55.44.33.24 ENTRY_END STEP 9 CHECK_ANSWER ENTRY_BEGIN MATCH all REPLY QR RD RA SECTION QUESTION bla.example.com. IN A SECTION ANSWER bla.example.com. IN A 10.20.30.140 SECTION AUTHORITY SECTION ADDITIONAL ENTRY_END ; original www.example.com query STEP 10 QUERY ENTRY_BEGIN REPLY RD SECTION QUESTION www.example.com. IN A ENTRY_END ; immediate answer without an OUT_QUERY happening (checked on exit) ; also, the answer does not have AA set ; NS rrset has not been updated from the additional seen before. STEP 11 CHECK_ANSWER ENTRY_BEGIN MATCH all REPLY QR RD RA SECTION QUESTION www.example.com. IN A SECTION ANSWER www.example.com. IN A 10.20.30.40 SECTION AUTHORITY example.com. IN NS ns.example.com. SECTION ADDITIONAL ns.example.com. IN A 10.20.30.50 ENTRY_END SCENARIO_END