mirror of
https://github.com/NLnetLabs/unbound.git
synced 2026-09-09 19:37:43 +02:00
W.C.A. Wijngaards
153f8d5353
limit auth-zone and rpz transfer amount and time taken. Default is disabled. This hardens against unbounded transfers. Thanks to Qifan Zhang, Palo Alto Networks, for the report.
75 lines
2.9 KiB
Plaintext
75 lines
2.9 KiB
Plaintext
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN SOA
|
|
SECTION ANSWER
|
|
example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN AXFR
|
|
SECTION ANSWER
|
|
example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600
|
|
example.com. IN NS ns.example.net.
|
|
; too big!
|
|
EXTRA_PACKET
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN AXFR
|
|
SECTION ANSWER
|
|
large01.example.com. IN TXT "123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
|
|
large02.example.com. IN TXT "123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
|
|
large03.example.com. IN TXT "123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
|
|
large04.example.com. IN TXT "123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
|
|
large05.example.com. IN TXT "123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
|
|
EXTRA_PACKET
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN AXFR
|
|
SECTION ANSWER
|
|
www.example.com. IN A 1.2.3.4
|
|
example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example2.com. IN SOA
|
|
SECTION ANSWER
|
|
example2.com. IN SOA ns.example2.com. hostmaster.example2.com. 1 3600 900 86400 3600
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example2.com. IN AXFR
|
|
SECTION ANSWER
|
|
example2.com. IN SOA ns.example2.com. hostmaster.example2.com. 1 3600 900 86400 3600
|
|
example2.com. IN NS ns.example2.net.
|
|
EXTRA_PACKET
|
|
REPLY QR AA NOERROR
|
|
; too slow
|
|
ADJUST packet_sleep=3
|
|
SECTION QUESTION
|
|
example2.com. IN AXFR
|
|
SECTION ANSWER
|
|
extra.example2.com. IN A 1.2.3.5
|
|
EXTRA_PACKET
|
|
REPLY QR AA NOERROR
|
|
SECTION QUESTION
|
|
example2.com. IN AXFR
|
|
SECTION ANSWER
|
|
www.example2.com. IN A 1.2.3.4
|
|
example2.com. IN SOA ns.example2.com. hostmaster.example2.com. 1 3600 900 86400 3600
|
|
ENTRY_END
|