chiark - git - mdw - dnserr/blob - dnserr.in

   1 ;;; -*-dns-*-
   2 ;;;
   3 ;;; A zone filled with interestingly wrong things.
   4
   5 $TTL 14400
   6
   7 ;;;--------------------------------------------------------------------------
   8 ;;; Standard zone scaffolding.
   9
  10 @                       IN      SOA     MASTER. (
  11                                                 CONTACT.
  12                                                  SERIAL      ;serial
  13                                                   86400      ;refresh
  14                                                    3600      ;retry
  15                                                 1209600      ;expire
  16                                                   14400 )    ;min-ttl
  17
  18 SUBZONE([@])
  19
  20 ;;;--------------------------------------------------------------------------
  21 ;;; Some wrong things.
  22
  23 ;; Some perfectly sensible records.
  24 a                       IN      A       198.51.100.16
  25 aaaa                    IN      AAAA    2001:db8::1
  26 addr                    IN      A       198.51.100.17
  27                         IN      AAAA    2001:db8::2
  28 maddr                   IN      A       198.51.100.1
  29                         IN      A       198.51.100.2
  30                         IN      A       192.0.2.1
  31                         IN      A       192.0.2.2
  32                         IN      A       203.0.113.1
  33                         IN      A       203.0.113.2
  34                         IN      AAAA    2001:db8:1::1
  35                         IN      AAAA    2001:db8:1::2
  36                         IN      AAAA    2001:db8:2::1
  37                         IN      AAAA    2001:db8:2::2
  38                         IN      AAAA    2001:db8:3::1
  39                         IN      AAAA    2001:db8:3::2
  40 mx                      IN      MX 69   maddr
  41                         IN      MX 69   a
  42                         IN      MX 69   aaaa
  43                         IN      MX 70   addr
  44 _http._tcp.srv          IN      SRV 69  3 80 maddr
  45                         IN      SRV 69  1 80 a
  46                         IN      SRV 69  1 80 aaaa
  47                         IN      SRV 70  1 80 addr
  48
  49 v6mapped                IN      AAAA    ::ffff:192.0.2.1
  50                         IN      AAAA    ::ffff:198.51.100.1
  51                         IN      AAAA    ::ffff:203.0.113.1
  52
  53 ;; Various stupid indirection games.
  54 cname                   IN      CNAME   a
  55 cname-2                 IN      CNAME   cname
  56 cname-3                 IN      CNAME   cname-2
  57 cname-mx                IN      CNAME   mx
  58 mx-cname                IN      MX 69   cname
  59 cname-srv               IN      CNAME   srv
  60 _http._tcp.srv-cname    IN      SRV 69  0 80 cname
  61
  62 ;; I promise never to define RRs for this name.
  63 ;nxdomain               IN      ANY
  64
  65 ;; A CNAME which doesn't point to anything.
  66 dangling-cname          IN      CNAME   nxdomain
  67
  68 ;; A CNAME which points to itself.
  69 loop                    IN      CNAME   loop
  70
  71 ;; I promise never to define A or AAAA records for this name.
  72 no-address              IN      TXT     "This name has no address records."
  73
  74 ;; A name -- in fact, an entire DNS subtree -- for which no authoritative
  75 ;; server will ever return a answer.  The address is
  76 ;; blackhole.distorted.org.uk, which drops all packets.
  77 FOREACH([ns.blackhole   IN      $1      $2
  78 ], [BLACKHOLE])
  79 blackhole               IN      NS      ns.blackhole
  80                         IN      DS      18693 8 1 f2ade1384e3cf158372ba16aa3a934a16104066d
  81                         IN      DS      18693 8 2 061929cdc2de9ba7728d4e011f796d0abb54c4a5e4681469d5f1d32d78e142f0
  82
  83 ;; A subtree for which authoritative servers will always answer REFUSED.
  84 ;; Recursive resolvers tend to turn this into SERVFAIL.
  85 SUBZONE([refused])
  86                         IN      DS      63860 8 1 612896152445f6f9134ba5c85a98dd62f527ec4a
  87                         IN      DS      63860 8 2 afb31601378c19d394997f7ee2f5c59f47d1ceb4d181a559053d680f1836b31e
  88
  89 ;; A subzone delegated to a server which doesn't think it's
  90 ;; authoritative.
  91 SUBZONE([lame])
  92                         IN      DS      54525 8 1 d6b4f044da02963de9d60180871b94975a001f55
  93                         IN      DS      54525 8 2 88ab5ce80505eceba195de90e93d53fecf388aff292694f80c4ee24ab77796b9
  94
  95 ;; I want some way of reliably provoking a SERVFAIL response from the
  96 ;; server, but I can't think of one right now.
  97 ;servfail               IN      ???
  98
  99 ;;;--------------------------------------------------------------------------
 100 ;;; DNSsec wrongness.
 101
 102 ;; An RRset whose DNSsec signature has expired.
 103 expired-rrsig           IN      A       127.0.0.1
 104                         IN      AAAA    ::1
 105 ;                       IN      RRSIG   ?
 106
 107 ;; An RRset whose signature is incorrect.
 108 invalid-rrsig           IN      A       127.0.0.1
 109                         IN      AAAA    ::1
 110 ;                       IN      RRSIG   ?
 111
 112 ;; A delegation with an incorrect DS record.
 113 SUBZONE([wrong-ds])
 114 wrong-ds                IN      DS      8224 8 1 c12019d5604e3e4b0e0efb7c62c00021b5943e95
 115 wrong-ds                IN      DS      8224 8 2 1541dfc4f64f26f5685a27bd0bdaac1ecb24b36f49e2d573d62646185978b78b
 116
 117 ;;;----- That's all, folks --------------------------------------------------