; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
;
; SPDX-License-Identifier: MPL-2.0
;
; This Source Code Form is subject to the terms of the Mozilla Public
; License, v. 2.0.  If a copy of the MPL was not distributed with this
; file, you can obtain one at https://mozilla.org/MPL/2.0/.
;
; See the COPYRIGHT file distributed with this work for additional
; information regarding copyright ownership.

$TTL 300	; 5 minutes
@			IN SOA	mname1. . (
				2000042407 ; serial
				20	   ; refresh (20 seconds)
				20	   ; retry (20 seconds)
				1814400	   ; expire (3 weeks)
				3600	   ; minimum (1 hour)
				)
			NS	ns2
			NS	ns3
ns2			A	10.53.0.2
ns3			A	10.53.0.3

a			A	10.0.0.1
b			A	10.0.0.2
d			A	10.0.0.4

; Used for testing ANY queries
foo			TXT	"testing"
foo			A	10.0.1.0

bad-cname		CNAME	a
bad-dname		DNAME	@

; Used for testing CNAME queries
cname1			CNAME	cname1-target
cname1-target		TXT	"testing cname"

cname2			CNAME	cname2-target
cname2-target		TXT	"testing cname"

; Used for testing DNAME queries
dname1			DNAME	dname1-target
foo.dname1-target	TXT	"testing dname"

dname2			DNAME	dname2-target
foo.dname2-target	TXT	"testing dname"

; A secure subdomain
secure			NS	ns3.secure
ns3.secure		A	10.53.0.3

; An insecure subdomain
insecure		NS	ns3.insecure
ns3.insecure		A	10.53.0.3

; A subdomain with an extra DNSKEY in the wrong place
extrakey		NS	ns3.extrakey
ns3.extrakey		A	10.53.0.3

; A secure subdomain we're going to inject bogus data into
bogus			NS	ns3.bogus
ns3.bogus		A	10.53.0.3

; A subdomain with a corrupt DS
badds			NS	ns3.badds
ns3.badds		A	10.53.0.3

; A subdomain with a corrupt DS, but locally trusted by the forwarder
localkey		NS	ns3.localkey
ns3.localkey		A	10.53.0.3

; A dynamic secure subdomain
dynamic			NS	ns3.dynamic
ns3.dynamic			A	10.53.0.3

; A subdomain with expired signatures
expired			NS	ns3.expired
ns3.expired		A	10.53.0.3

; A rfc2535 signed zone w/ CNAME
rfc2535			NS	ns.rfc2535
ns.rfc2535		A	10.53.0.2

z			A	10.0.0.26

keyless			NS	ns3.keyless
ns3.keyless		A	10.53.0.3

nsec3			NS	ns3.nsec3
ns3.nsec3		A	10.53.0.3

optout			NS	ns3.optout
ns3.optout		A	10.53.0.3

nsec3-unknown		NS	ns3.nsec3-unknown
ns3.nsec3-unknown	A	10.53.0.3

optout-unknown		NS	ns3.optout-unknown
ns3.optout-unknown	A	10.53.0.3

dnskey-unknown		NS	ns3.dnskey-unknown
ns3.dnskey-unknown	A	10.53.0.3

dnskey-unsupported	NS	ns3.dnskey-unsupported
ns3.dnskey-unsupported	A	10.53.0.3

dnskey-unsupported-2		NS	ns3.dnskey-unsupported
ns3.dnskey-unsupported-2	A	10.53.0.3

ds-unsupported		NS	ns3.ds-unsupported
ns3.ds-unsupported	A	10.53.0.3

digest-alg-unsupported		NS	ns3.digest-alg-unsupported
ns3.digest-alg-unsupported	A	10.53.0.3

dnskey-nsec3-unknown		NS	ns3.dnskey-nsec3-unknown
ns3.dnskey-nsec3-unknown	A	10.53.0.3

multiple		NS	ns3.multiple
ns3.multiple		A	10.53.0.3

*.wild			A	10.0.0.27

rsasha256		NS	ns3.rsasha256
ns3.rsasha256		A	10.53.0.3

rsasha512		NS	ns3.rsasha512
ns3.rsasha512		A	10.53.0.3

kskonly			NS	ns3.kskonly
ns3.kskonly		A	10.53.0.3

update-nsec3		NS	ns3.update-nsec3
ns3.update-nsec3	A	10.53.0.3

auto-nsec		NS	ns3.auto-nsec
ns3.auto-nsec		A	10.53.0.3

auto-nsec3		NS	ns3.auto-nsec3
ns3.auto-nsec3		A	10.53.0.3


below-cname		CNAME	some.where.else.

insecure.below-cname		NS	ns3.insecure.below-cname
ns3.insecure.below-cname	A	10.53.0.3

secure.below-cname	NS	ns3.secure.below-cname
ns3.secure.below-cname	A	10.53.0.3

ttlpatch		NS	ns3.ttlpatch
ns3.ttlpatch		A	10.53.0.3

split-dnssec		NS	ns3.split-dnssec
ns3.split-dnssec	A	10.53.0.3

split-smart		NS	ns3.split-smart
ns3.split-smart		A	10.53.0.3

upper			NS	ns3.upper
ns3.upper		A	10.53.0.3

LOWER			NS	NS3.LOWER
NS3.LOWER		A	10.53.0.3

expiring		NS	ns3.expiring
ns3.expiring		A	10.53.0.3

future			NS	ns3.future
ns3.future		A	10.53.0.3

managed-future		NS	ns3.managed-future
ns3.managed-future	A	10.53.0.3

revkey			NS	ns3.revkey
ns3.revkey		A	10.53.0.3

rsasha1			NS	ns3.rsasha1
ns3.rsasha1		A	10.53.0.3

rsasha1-1024		NS	ns3.rsasha1-1024
ns3.rsasha1-1024	A	10.53.0.3

dname-at-apex-nsec3	NS	ns3

rsasha256oid		NS	ns3.rsasha256oid
ns3.rsasha256oid	A	10.53.0.3

rsasha512oid		NS	ns3.rsasha512oid
ns3.rsasha512oid	A	10.53.0.3

unknownoid		NS	ns3.unknownoid
ns3.unknownoid		A	10.53.0.3

extradsoid		NS	ns3.extradsoid
ns3.extradsoid		A	10.53.0.3

extradsunknownoid	NS	ns3.extradsunknownoid
ns3.extradsunknownoid	A	10.53.0.3

extended-ds-unknown-oid	NS	ns3.extended-ds-unknown-oid
ns3.extended-ds-unknown-oid A	10.53.0.3

; A secure subdomain with extra bad key
extrabadkey		NS	ns3.extrabadkey
ns3.extrabadkey		A	10.53.0.3
