1; Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2; 3; SPDX-License-Identifier: MPL-2.0 4; 5; This Source Code Form is subject to the terms of the Mozilla Public 6; License, v. 2.0. If a copy of the MPL was not distributed with this 7; file, you can obtain one at https://mozilla.org/MPL/2.0/. 8; 9; See the COPYRIGHT file distributed with this work for additional 10; information regarding copyright ownership. 11 12$TTL 300 ; 5 minutes 13@ IN SOA mname1. . ( 14 2000042407 ; serial 15 20 ; refresh (20 seconds) 16 20 ; retry (20 seconds) 17 1814400 ; expire (3 weeks) 18 3600 ; minimum (1 hour) 19 ) 20 NS ns2 21 NS ns3 22ns2 A 10.53.0.2 23ns3 A 10.53.0.3 24 25a A 10.0.0.1 26b A 10.0.0.2 27d A 10.0.0.4 28 29; Used for testing ANY queries 30foo TXT "testing" 31foo A 10.0.1.0 32 33bad-cname CNAME a 34bad-dname DNAME @ 35 36; Used for testing CNAME queries 37cname1 CNAME cname1-target 38cname1-target TXT "testing cname" 39 40cname2 CNAME cname2-target 41cname2-target TXT "testing cname" 42 43; Used for testing DNAME queries 44dname1 DNAME dname1-target 45foo.dname1-target TXT "testing dname" 46 47dname2 DNAME dname2-target 48foo.dname2-target TXT "testing dname" 49 50; A secure subdomain 51secure NS ns3.secure 52ns3.secure A 10.53.0.3 53 54; An insecure subdomain 55insecure NS ns.insecure 56ns.insecure A 10.53.0.3 57 58; A secure subdomain we're going to inject bogus data into 59bogus NS ns.bogus 60ns.bogus A 10.53.0.3 61 62; A subdomain with a corrupt DS 63badds NS ns.badds 64ns.badds A 10.53.0.3 65 66; A dynamic secure subdomain 67dynamic NS dynamic 68dynamic A 10.53.0.3 69 70; A insecure subdomain 71mustbesecure NS ns.mustbesecure 72ns.mustbesecure A 10.53.0.3 73 74; A subdomain with expired signatures 75expired NS ns.expired 76ns.expired A 10.53.0.3 77 78; A rfc2535 signed zone w/ CNAME 79rfc2535 NS ns.rfc2535 80ns.rfc2535 A 10.53.0.3 81 82z A 10.0.0.26 83 84keyless NS ns.keyless 85ns.keyless A 10.53.0.3 86 87nsec3 NS ns.nsec3 88ns.nsec3 A 10.53.0.3 89 90optout NS ns.optout 91ns.optout A 10.53.0.3 92 93nsec3-unknown NS ns.nsec3-unknown 94ns.nsec3-unknown A 10.53.0.3 95 96optout-unknown NS ns.optout-unknown 97ns.optout-unknown A 10.53.0.3 98 99dnskey-unknown NS ns.dnskey-unknown 100ns.dnskey-unknown A 10.53.0.3 101 102dnskey-unsupported NS ns.dnskey-unsupported 103ns.dnskey-unsupported A 10.53.0.3 104 105dnskey-nsec3-unknown NS ns.dnskey-nsec3-unknown 106ns.dnskey-nsec3-unknown A 10.53.0.3 107 108multiple NS ns.multiple 109ns.multiple A 10.53.0.3 110 111*.wild A 10.0.0.27 112 113rsasha256 NS ns.rsasha256 114ns.rsasha256 A 10.53.0.3 115 116rsasha512 NS ns.rsasha512 117ns.rsasha512 A 10.53.0.3 118 119kskonly NS ns.kskonly 120ns.kskonly A 10.53.0.3 121 122update-nsec3 NS ns.update-nsec3 123ns.update-nsec3 A 10.53.0.3 124 125auto-nsec NS ns.auto-nsec 126ns.auto-nsec A 10.53.0.3 127 128auto-nsec3 NS ns.auto-nsec3 129ns.auto-nsec3 A 10.53.0.3 130 131 132below-cname CNAME some.where.else. 133 134insecure.below-cname NS ns.insecure.below-cname 135ns.insecure.below-cname A 10.53.0.3 136 137secure.below-cname NS ns.secure.below-cname 138ns.secure.below-cname A 10.53.0.3 139 140ttlpatch NS ns.ttlpatch 141ns.ttlpatch A 10.53.0.3 142 143split-dnssec NS ns.split-dnssec 144ns.split-dnssec A 10.53.0.3 145 146split-smart NS ns.split-smart 147ns.split-smart A 10.53.0.3 148 149upper NS ns.upper 150ns.upper A 10.53.0.3 151 152LOWER NS NS.LOWER 153NS.LOWER A 10.53.0.3 154 155expiring NS ns.expiring 156ns.expiring A 10.53.0.3 157 158future NS ns.future 159ns.future A 10.53.0.3 160 161managed-future NS ns.managed-future 162ns.managed-future A 10.53.0.3 163 164revkey NS ns.revkey 165ns.revkey A 10.53.0.3 166 167dname-at-apex-nsec3 NS ns3 168