after a CNAME.
- Fix unit tests for rpz now that the AA flag returns successfully from
the iterator loop.
+ - Fix for #596: add unit test for nsdname trigger and signal unset RA.
4 January 2022: Wouter
- Fix #596: unset the RA bit when a query is blocked by an unbound
$ORIGIN rpz.example.com.
a.a CNAME .
b.a CNAME .
+ns1.a.rpz-nsdname CNAME .
TEMPFILE_END
stub-zone:
c.a. IN CNAME b.a
ENTRY_END
+ENTRY_BEGIN
+MATCH opcode subdomain
+ADJUST copy_id copy_query
+REPLY QR NOERROR
+SECTION QUESTION
+d.a. IN NS
+SECTION ANSWER
+SECTION AUTHORITY
+d.a. IN NS ns1.a.
+SECTION ADDITIONAL
+ns1.a. IN A 10.20.30.50
+ENTRY_END
+
+RANGE_END
+
+RANGE_BEGIN 0 100
+ ADDRESS 10.20.30.50
+ENTRY_BEGIN
+MATCH opcode qtype qname
+ADJUST copy_id
+REPLY QR NOERROR
+SECTION QUESTION
+d.a. IN NS
+SECTION ANSWER
+d.a. IN NS ns1.a.
+SECTION ADDITIONAL
+ns1.a. IN A 10.20.30.50
+ENTRY_END
+
+ENTRY_BEGIN
+MATCH opcode qtype qname
+ADJUST copy_id
+REPLY QR NOERROR
+SECTION QUESTION
+d.d.a. IN TXT
+SECTION ANSWER
+d.d.a. IN TXT "upstream answer for d.d.a"
+ENTRY_END
+
RANGE_END
STEP 10 QUERY
c.a. IN CNAME b.a
ENTRY_END
+STEP 30 QUERY
+ENTRY_BEGIN
+REPLY RD
+SECTION QUESTION
+d.d.a. IN TXT
+ENTRY_END
+
+STEP 31 CHECK_ANSWER
+ENTRY_BEGIN
+MATCH all
+REPLY QR RD AA NXDOMAIN
+SECTION QUESTION
+d.d.a. IN TXT
+SECTION ANSWER
+ENTRY_END
+
SCENARIO_END