X-Git-Url: https://git.distorted.org.uk/~mdw/dnserr/blobdiff_plain/2ff79b439976586a3d20210f5e845340a423253e..aa5daa178c91e65ef73382f526189d41a42b2651:/dnserr.in diff --git a/dnserr.in b/dnserr.in index ebcdf97..fa16859 100644 --- a/dnserr.in +++ b/dnserr.in @@ -9,11 +9,11 @@ $TTL 14400 @ IN SOA MASTER. ( CONTACT. - 2012033109 ;serial - 86400 ;refresh - 3600 ;retry - 1209600 ;expire - 14400 ) ;min-ttl + 2014050410 ;serial + 86400 ;refresh + 3600 ;retry + 1209600 ;expire + 14400 ) ;min-ttl SUBZONE([@]) @@ -21,9 +21,34 @@ SUBZONE([@]) ;;; Some wrong things. ;; Some perfectly sensible records. -a IN A 127.0.0.1 -mx IN MX 69 a -_http._tcp.srv IN SRV 69 0 80 a +a IN A 198.51.100.16 +aaaa IN AAAA 2001:db8::1 +addr IN A 198.51.100.17 + IN AAAA 2001:db8::2 +maddr IN A 198.51.100.1 + IN A 198.51.100.2 + IN A 192.0.2.1 + IN A 192.0.2.2 + IN A 203.0.113.1 + IN A 203.0.113.2 + IN AAAA 2001:db8:1::1 + IN AAAA 2001:db8:1::2 + IN AAAA 2001:db8:2::1 + IN AAAA 2001:db8:2::2 + IN AAAA 2001:db8:3::1 + IN AAAA 2001:db8:3::2 +mx IN MX 69 maddr + IN MX 69 a + IN MX 69 aaaa + IN MX 70 addr +_http._tcp.srv IN SRV 69 3 80 maddr + IN SRV 69 1 80 a + IN SRV 69 1 80 aaaa + IN SRV 70 1 80 addr + +v6mapped IN AAAA ::ffff:192.0.2.1 + IN AAAA ::ffff:198.51.100.1 + IN AAAA ::ffff:203.0.113.1 ;; Various stupid indirection games. cname IN CNAME a @@ -32,7 +57,7 @@ cname-3 IN CNAME cname-2 cname-mx IN CNAME mx mx-cname IN MX 69 cname cname-srv IN CNAME srv -srv-cname IN SRV 69 0 80 cname +_http._tcp.srv-cname IN SRV 69 0 80 cname ;; I promise never to define RRs for this name. ;nxdomain IN ANY @@ -49,7 +74,8 @@ no-address IN TXT "This name has no address records." ;; A name -- in fact, an entire DNS subtree -- for which no authoritative ;; server will ever return a answer. The address is ;; blackhole.distorted.org.uk, which drops all packets. -ns.blackhole IN A BLACKHOLE +FOREACH([ns.blackhole IN $1 $2 +], [BLACKHOLE]) blackhole IN NS ns.blackhole IN DS 18693 8 1 f2ade1384e3cf158372ba16aa3a934a16104066d IN DS 18693 8 2 061929cdc2de9ba7728d4e011f796d0abb54c4a5e4681469d5f1d32d78e142f0 @@ -75,10 +101,12 @@ SUBZONE([lame]) ;; An RRset whose DNSsec signature has expired. expired-rrsig IN A 127.0.0.1 + IN AAAA ::1 ; IN RRSIG ? ;; An RRset whose signature is incorrect. -invalid-rrsigx IN A 127.0.0.1 +invalid-rrsig IN A 127.0.0.1 + IN AAAA ::1 ; IN RRSIG ? ;; A delegation with an incorrect DS record. @@ -86,5 +114,4 @@ SUBZONE([wrong-ds]) wrong-ds IN DS 8224 8 1 c12019d5604e3e4b0e0efb7c62c00021b5943e95 wrong-ds IN DS 8224 8 2 1541dfc4f64f26f5685a27bd0bdaac1ecb24b36f49e2d573d62646185978b78b - ;;;----- That's all, folks --------------------------------------------------