bind9/bin/tests/system/forward/ns1/net.example.lll

; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
;
; SPDX-License-Identifier: MPL-2.0
;
; This Source Code Form is subject to the terms of the Mozilla Public
; License, v. 2.0.  If a copy of the MPL was not distributed with this
; file, you can obtain one at https://mozilla.org/MPL/2.0/.
;
; See the COPYRIGHT file distributed with this work for additional
; information regarding copyright ownership.

$TTL 86400
net.example.lll.		SOA	. . 0 0 0 0 0
net.example.lll.		NS	attackSecureDomain.net.
didItWork.net.example.lll.	TXT	"if you can see this record the attack worked"
Add tests for forwarder cache poisoning scenarios - Check that an NS in an authority section returned from a forwarder which is above the name in a configured "forward first" or "forward only" zone (i.e., net/NS in a response from a forwarder configured for local.net) is not cached. - Test that a DNAME for a parent domain will not be cached when sent in a response from a forwarder configured to answer for a child. - Check that glue is rejected if its name falls below that of zone configured locally. - Check that an extra out-of-bailiwick data in the answer section is not cached (this was already working correctly, but was not explicitly tested before). 2022-01-17 08:19:47 -05:00			`; Copyright (C) Internet Systems Consortium, Inc. ("ISC")`
			`;`
			`; SPDX-License-Identifier: MPL-2.0`
			`;`
			`; This Source Code Form is subject to the terms of the Mozilla Public`
			`; License, v. 2.0. If a copy of the MPL was not distributed with this`
			`; file, you can obtain one at https://mozilla.org/MPL/2.0/.`
			`;`
			`; See the COPYRIGHT file distributed with this work for additional`
			`; information regarding copyright ownership.`

			`$TTL 86400`
			`net.example.lll. SOA . . 0 0 0 0 0`
			`net.example.lll. NS attackSecureDomain.net.`
			`didItWork.net.example.lll. TXT "if you can see this record the attack worked"`