1; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
2;
3; SPDX-License-Identifier: MPL-2.0
4;
5; This Source Code Form is subject to the terms of the Mozilla Public
6; License, v. 2.0.  If a copy of the MPL was not distributed with this
7; file, you can obtain one at https://mozilla.org/MPL/2.0/.
8;
9; See the COPYRIGHT file distributed with this work for additional
10; information regarding copyright ownership.
11
12$TTL 300	; 5 minutes
13@			IN SOA	mname1. . (
14				2000042407 ; serial
15				20         ; refresh (20 seconds)
16				20         ; retry (20 seconds)
17				1814400    ; expire (3 weeks)
18				3600       ; minimum (1 hour)
19				)
20			NS	ns2
21			NS	ns3
22ns2			A	10.53.0.2
23ns3			A	10.53.0.3
24
25a			A	10.0.0.1
26b			A	10.0.0.2
27d			A	10.0.0.4
28
29; Used for testing ANY queries
30foo			TXT	"testing"
31foo			A	10.0.1.0
32
33bad-cname		CNAME   a
34bad-dname		DNAME   @
35
36; Used for testing CNAME queries
37cname1			CNAME	cname1-target
38cname1-target		TXT	"testing cname"
39
40cname2			CNAME	cname2-target
41cname2-target		TXT	"testing cname"
42
43; Used for testing DNAME queries
44dname1			DNAME	dname1-target
45foo.dname1-target	TXT	"testing dname"
46
47dname2			DNAME	dname2-target
48foo.dname2-target	TXT	"testing dname"
49
50; A secure subdomain
51secure			NS	ns3.secure
52ns3.secure		A	10.53.0.3
53
54; An insecure subdomain
55insecure		NS	ns.insecure
56ns.insecure		A	10.53.0.3
57
58; A secure subdomain we're going to inject bogus data into
59bogus			NS	ns.bogus
60ns.bogus		A	10.53.0.3
61
62; A subdomain with a corrupt DS
63badds			NS	ns.badds
64ns.badds		A	10.53.0.3
65
66; A dynamic secure subdomain
67dynamic			NS	dynamic
68dynamic			A	10.53.0.3
69
70; A insecure subdomain
71mustbesecure		NS	ns.mustbesecure
72ns.mustbesecure		A	10.53.0.3
73
74; A subdomain with expired signatures
75expired			NS	ns.expired
76ns.expired		A	10.53.0.3
77
78; A rfc2535 signed zone w/ CNAME
79rfc2535			NS	ns.rfc2535
80ns.rfc2535		A	10.53.0.3
81
82z			A	10.0.0.26
83
84keyless			NS	ns.keyless
85ns.keyless		A	10.53.0.3
86
87nsec3			NS	ns.nsec3
88ns.nsec3		A	10.53.0.3
89
90optout			NS	ns.optout
91ns.optout		A	10.53.0.3
92
93nsec3-unknown		NS	ns.nsec3-unknown
94ns.nsec3-unknown	A	10.53.0.3
95
96optout-unknown		NS	ns.optout-unknown
97ns.optout-unknown	A	10.53.0.3
98
99dnskey-unknown		NS	ns.dnskey-unknown
100ns.dnskey-unknown	A	10.53.0.3
101
102dnskey-unsupported	NS	ns.dnskey-unsupported
103ns.dnskey-unsupported	A	10.53.0.3
104
105dnskey-nsec3-unknown	NS	ns.dnskey-nsec3-unknown
106ns.dnskey-nsec3-unknown	A	10.53.0.3
107
108multiple		NS	ns.multiple
109ns.multiple		A	10.53.0.3
110
111*.wild			A	10.0.0.27
112
113rsasha256		NS	ns.rsasha256
114ns.rsasha256		A	10.53.0.3
115
116rsasha512		NS	ns.rsasha512
117ns.rsasha512		A	10.53.0.3
118
119kskonly			NS	ns.kskonly
120ns.kskonly		A	10.53.0.3
121
122update-nsec3		NS	ns.update-nsec3
123ns.update-nsec3		A	10.53.0.3
124
125auto-nsec		NS	ns.auto-nsec
126ns.auto-nsec		A	10.53.0.3
127
128auto-nsec3		NS	ns.auto-nsec3
129ns.auto-nsec3		A	10.53.0.3
130
131
132below-cname		CNAME	some.where.else.
133
134insecure.below-cname	NS	ns.insecure.below-cname
135ns.insecure.below-cname	A	10.53.0.3
136
137secure.below-cname	NS	ns.secure.below-cname
138ns.secure.below-cname	A	10.53.0.3
139
140ttlpatch		NS	ns.ttlpatch
141ns.ttlpatch		A	10.53.0.3
142
143split-dnssec		NS	ns.split-dnssec
144ns.split-dnssec		A	10.53.0.3
145
146split-smart		NS	ns.split-smart
147ns.split-smart		A	10.53.0.3
148
149upper			NS	ns.upper
150ns.upper		A	10.53.0.3
151
152LOWER			NS	NS.LOWER
153NS.LOWER		A	10.53.0.3
154
155expiring                 NS      ns.expiring
156ns.expiring              A       10.53.0.3
157
158future			NS	ns.future
159ns.future		A	10.53.0.3
160
161managed-future		NS	ns.managed-future
162ns.managed-future	A	10.53.0.3
163
164revkey			NS	ns.revkey
165ns.revkey		A	10.53.0.3
166
167dname-at-apex-nsec3	NS	ns3
168