clones/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2024-09-21 06:37:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Qname minimisation default changed to yes.

Browse Source 
git-svn-id: file:///svn/unbound/trunk@4685 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Ralph Dolmans 2018-05-17 10:33:19 +00:00
parent ba29a4a078
commit 50b6dc4b81
217 changed files with 347 additions and 138 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/Changelog
View File

@ -1,3 +1,6 @@
17 May 2018: Ralph
- Qname minimisation default changed to yes.
15 May 2018: Wouter
- Fix low-rtt-pct to low-rtt-permil, as it is parts in one thousand.

2
doc/example.conf.in
View File

@ -372,7 +372,7 @@ server:
# Sent minimum amount of information to upstream servers to enhance
# privacy. Only sent minimum required labels of the QNAME and set QTYPE
# to A when possible.
# qname-minimisation: no
# qname-minimisation: yes
# QNAME minimisation in strict mode. Do not fall-back to sending full
# QNAME to potentially broken nameservers. A lot of domains will not be

2
doc/unbound.conf.5.in
View File

@ -722,7 +722,7 @@ Send minimum amount of information to upstream servers to enhance privacy.
Only sent minimum required labels of the QNAME and set QTYPE to A when
possible. Best effort approach; full QNAME and original QTYPE will be sent when
upstream replies with a RCODE other than NOERROR, except when receiving
NXDOMAIN from a DNSSEC signed zone. Default is off.
NXDOMAIN from a DNSSEC signed zone. Default is yes.
.TP
.B qname\-minimisation\-strict: \fI<yes or no>
QNAME minimisation in strict mode. Do not fall-back to sending full QNAME to

1
testdata/auth_xfr_host.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
auth-zone:
name: "example.com."

1
testdata/autotrust_init_failsig.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
log-time-ascii: yes
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/autotrust_revtp_use.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
log-time-ascii: yes
val-override-date: '20091018111500'
fake-sha1: yes

1
testdata/black_data.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/black_dnskey.rpl vendored
View File

@ -6,6 +6,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
fake-sha1: yes
trust-anchor-signaling: no
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/black_ds.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/black_ent.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/black_prime.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/black_prime_entry.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_anchor.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_ask_higher.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_below_ta.rpl vendored
View File

@ -5,6 +5,7 @@ server:
trust-anchor: "example.net. 3600 IN DS 30899 5 1 14188c885f20623ad1d3bec42798f3f951793e4c ; xehac-mofum-malyd-bomaf-pegit-fuzes-ganin-misiz-nigel-nozog-soxix"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_delegation.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_ds_lookup.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_insecure.rpl vendored
View File

@ -5,6 +5,7 @@ server:
val-override-date: "20070916134226"
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_insecure_negcache.rpl vendored
View File

@ -5,6 +5,7 @@ server:
val-override-date: "20070916134226"
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_keyretry.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_negnx.rpl vendored
View File

@ -4,6 +4,7 @@ server:
dlv-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_optout.rpl vendored
View File

@ -5,6 +5,7 @@ server:
trust-anchor: "example.net. 3600 IN DS 30899 5 1 14188c885f20623ad1d3bec42798f3f951793e4c ; xehac-mofum-malyd-bomaf-pegit-fuzes-ganin-misiz-nigel-nozog-soxix"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dlv_remove_pos.rpl vendored
View File

@ -5,6 +5,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/dns64_lookup.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
module-config: "dns64 validator iterator"
dns64-prefix: 64:ff9b::0/96

1
testdata/domain_insec_ds.rpl vendored
View File

@ -5,6 +5,7 @@ server:
domain-insecure: "sub.example.com"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/fetch_glue.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/fetch_glue_cname.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/fwddlv_parse.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "dlv.isc.org. 5072 IN DNSKEY 256 3 5 BEAAAAOlYGw53D+f01yCL5JsP0SB6EjYrnd0JYRBooAaGPT+Q0kpiN+7GviFh+nIazoB8e2Yv7mupgqkmIjObdcbGstYpUltdECdNpNmBvASKB9SBdtGeRvXXpORi3Qyxb9kHGG7SpzyYbc+KDVKnzYHB94pvqu3ZZpPFPBFtCibp/mkhw=="
val-override-date: "20090617133009"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/ipsecmod_bogus_ipseckey.crpl vendored
View File

@ -6,6 +6,7 @@ server:
trust-anchor: "example.com. IN DS 48069 8 2 fce2bcb0d88b828064faad58e935ca2e32ff0bbd8bd8407a8f344d8f8e8c438a"
val-override-date: "-1"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
# test that default value of harden-dnssec-stripped is still yes.
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/ipsecmod_enabled.crpl vendored
View File

@ -9,6 +9,7 @@ server:
ipsecmod-strict: no
ipsecmod-max-ttl: 200
ipsecmod-enabled: no
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ipsecmod_ignore_bogus_ipseckey.crpl vendored
View File

@ -16,6 +16,7 @@ server:
ipsecmod-strict: no
ipsecmod-max-ttl: 200
ipsecmod-ignore-bogus: yes
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ipsecmod_max_ttl.crpl vendored
View File

@ -8,6 +8,7 @@ server:
ipsecmod-hook: "../../testdata/ipsecmod_hook.sh"
ipsecmod-strict: no
ipsecmod-max-ttl: 200
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ipsecmod_strict.crpl vendored
View File

@ -8,6 +8,7 @@ server:
ipsecmod-hook: "../../testdata/ipsecmod_hook.sh"
ipsecmod-strict: yes
ipsecmod-max-ttl: 200
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ipsecmod_whitelist.crpl vendored
View File

@ -9,6 +9,7 @@ server:
ipsecmod-strict: no
ipsecmod-max-ttl: 200
ipsecmod-whitelist: white.example.com
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_class_any.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_cname_double.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_cname_nx.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_cname_qnamecopy.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_cycle.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_cycle_noh.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-glue: "no"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_dname_insec.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_dnsseclame_bug.rpl vendored
View File

@ -4,6 +4,7 @@ server:
val-override-date: "20070916134226"
fake-sha1: yes
trust-anchor-signaling: no
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_dnsseclame_ds.rpl vendored
View File

@ -4,6 +4,7 @@ server:
val-override-date: "20070916134226"
fake-sha1: yes
trust-anchor-signaling: no
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_dnsseclame_ds_ok.rpl vendored
View File

@ -3,6 +3,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_dnsseclame_ta.rpl vendored
View File

@ -4,6 +4,7 @@ server:
val-override-date: "20070916134226"
fake-sha1: yes
trust-anchor-signaling: no
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_dnsseclame_ta_ok.rpl vendored
View File

@ -3,6 +3,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

2
testdata/iter_donotq127.rpl vendored
View File

@ -1,4 +1,6 @@
; config options
server:
qname-minimisation: "no"
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.

1
testdata/iter_ds_locate_ns_detach.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "3 2 1 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_emptydp.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "3 2 1 0 0" # make sure it fetches for test
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_emptydp_for_glue.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "3 2 1 0 0" # make sure it fetches for test
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_got6only.rpl vendored
View File

@ -2,6 +2,7 @@
server:
do-ip6: no
target-fetch-policy: "0 0 0 0 0 "
qname-minimisation: "no"
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.

1
testdata/iter_hint_lame.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_lame_noaa.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

2
testdata/iter_lamescrub.rpl vendored
View File

@ -1,4 +1,6 @@
; config options
server:
qname-minimisation: "no"
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.

1
testdata/iter_mod.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
module-config: "iterator"
stub-zone:

1
testdata/iter_ns_badip.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "3 2 1 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_ns_spoof.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-referral-path: yes
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.

1
testdata/iter_pcdirect.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_prefetch.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
stub-zone:

1
testdata/iter_prefetch_childns.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
stub-zone:

1
testdata/iter_prefetch_ns.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
stub-zone:

1
testdata/iter_primenoglue.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "3 2 1 0 0" # make sure it fetches for test
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_privaddr.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12

1
testdata/iter_reclame_one.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_recurse.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_resolve.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_resolve_minimised.rpl vendored
View File

@ -1,7 +1,6 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: yes
stub-zone:
name: "."

1
testdata/iter_scrub_cname_an.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_scrub_dname_insec.rpl vendored
View File

@ -2,6 +2,7 @@
server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/iter_scrub_dname_rev.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_scrub_dname_sec.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/iter_timeout_ra_aaaa.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
stub-zone:
name: "."

2
testdata/local_ds.rpl vendored
View File

@ -1,7 +1,7 @@
; config options
; The island of trust is at example.com
server:
qname-minimisation: "no"
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.

1
testdata/local_nodefault.rpl vendored
View File

@ -2,6 +2,7 @@
; The island of trust is at example.com
server:
local-zone: "10.in-addr.arpa" nodefault
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/local_typetransparent.rpl vendored
View File

@ -3,6 +3,7 @@
server:
local-zone: "example.com." typetransparent
local-data: "mail.example.com. IN A 10.20.30.40"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/nomem_cnametopos.rpl vendored
View File

@ -7,6 +7,7 @@ server:
msg-cache-size: 8
rrset-cache-size: 8
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/stop_nxdomain.rpl vendored
View File

@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
harden-below-nxdomain: yes
trust-anchor: ". IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3"
val-override-date: "20070916134226"

1
testdata/subnet_cached.crpl vendored
View File

@ -11,6 +11,7 @@ server:
module-config: "subnetcache validator iterator"
verbosity: 3
access-control: 127.0.0.1 allow_snoop
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_derived.crpl vendored
View File

@ -4,6 +4,7 @@ server:
max-client-subnet-ipv4: 21
verbosity: 3
module-config: "subnetcache validator iterator"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_format_ip4.crpl vendored
View File

@ -3,6 +3,7 @@ server:
max-client-subnet-ipv4: 21
verbosity: 3
module-config: "subnetcache validator iterator"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_max_source.crpl vendored
View File

@ -9,6 +9,7 @@ server:
max-client-subnet-ipv4: 17
module-config: "subnetcache validator iterator"
verbosity: 3
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_not_whitelisted.crpl vendored
View File

@ -4,6 +4,7 @@ server:
max-client-subnet-ipv4: 21
verbosity: 3
module-config: "subnetcache validator iterator"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_val_positive.crpl vendored
View File

@ -9,6 +9,7 @@ server:
max-client-subnet-ipv4: 17
module-config: "subnetcache validator iterator"
verbosity: 3
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_val_positive_client.crpl vendored
View File

@ -10,6 +10,7 @@ server:
max-client-subnet-ipv4: 17
module-config: "subnetcache validator iterator"
verbosity: 3
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/subnet_without_validator.crpl vendored
View File

@ -3,6 +3,7 @@ server:
max-client-subnet-ipv4: 21
verbosity: 3
module-config: "subnetcache iterator"
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ttl_max.rpl vendored
View File

@ -2,6 +2,7 @@
server:
access-control: 127.0.0.1 allow_snoop
cache-max-ttl: 10
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ttl_min.rpl vendored
View File

@ -2,6 +2,7 @@
server:
access-control: 127.0.0.1 allow_snoop
cache-min-ttl: 10
qname-minimisation: "no"
stub-zone:
name: "."

1
testdata/ttl_msg.rpl vendored
View File

@ -2,6 +2,7 @@
; fetch all extra targets - we want to trigger a lookup in cache
server:
target-fetch-policy: "-1 -1 -1 -1 -1"
qname-minimisation: "no"
access-control: 127.0.0.1 allow_snoop
stub-zone:

1
testdata/val_adbit.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_adcopy.rpl vendored
View File

@ -4,6 +4,7 @@ server:
#trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
stub-zone:

1
testdata/val_anchor_nx.rpl vendored
View File

@ -5,6 +5,7 @@ server:
trust-anchor: "sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_anchor_nx_nosig.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
stub-zone:

1
testdata/val_ans_dsent.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_ans_nx.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_any.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_any_cname.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_any_dname.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no

1
testdata/val_cname_loop1.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
stub-zone:

1
testdata/val_cname_loop2.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
stub-zone:

1
testdata/val_cname_loop3.rpl vendored
View File

@ -4,6 +4,7 @@ server:
trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
stub-zone:

Some files were not shown because too many files have changed in this diff Show More