a5044c42a80dabfdcf72980bb448c843eeae5057Andreas Gustafsson * Copyright (C) 2010, 2012 Internet Systems Consortium, Inc. ("ISC")

0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *

0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and/or distribute this software for any

0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above

a5044c42a80dabfdcf72980bb448c843eeae5057Andreas Gustafsson * copyright notice and this permission notice appear in all copies.

a5044c42a80dabfdcf72980bb448c843eeae5057Andreas Gustafsson *

70e5a7403f0e0a3bd292b8287c5fed5772c15270Automatic Updater * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH

821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY

821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,

a5044c42a80dabfdcf72980bb448c843eeae5057Andreas Gustafsson * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington * PERFORMANCE OF THIS SOFTWARE.

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian WellingtonSYSTEMTESTTOP=..

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington. $SYSTEMTESTTOP/conf.sh

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellington

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellingtonstatus=0

d34b3b1c120a7eb67dca503e0c28c0531745403bBrian Wellingtonn=0

d34b3b1c120a7eb67dca503e0c28c0531745403bBrian Wellington

2264a174f3c2786ea49c1dd153a85b6c3ef41e8fBrian Wellingtonrm -f dig.out.*

DIGOPTS="+tcp +noadd +nosea +nostat +nocmd -p 5300"

for conf in conf/good*.conf

n=`expr $n + 1`

echo "I:checking that $conf is accepted ($n)"

ret=0

$CHECKCONF "$conf" || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

for conf in conf/bad*.conf

n=`expr $n + 1`

echo "I:checking that $conf is rejected ($n)"

ret=0

$CHECKCONF "$conf" >/dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, signed ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.signed -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep ::2 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, unsigned ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep ::5 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed +dnssec -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep ::3 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.2 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep ::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY ($n)"

ret=0

$DIG $DIGOPTS any dual.signed -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns1.test$n > /dev/null || ret=1

grep "::3" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns1.test$n > /dev/null || ret=1

grep "::6" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set ($n)"

ret=0

$DIG $DIGOPTS any dual.signed +dnssec -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep ::3 dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned +dnssec -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns1.test$n > /dev/null || ret=1

grep "::6" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.2 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep 1.0.0.6 dig.out.ns1.test$n > /dev/null || ret=1

grep ::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6 ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::1

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep 2001:db8::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=NS ($n)"

ret=0

$DIG $DIGOPTS +add ns unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep AAAA dig.out.ns1.test$n > /dev/null 2>&1 && ret=1

grep "ADDITIONAL: 2" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, unsigned ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, signed ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx signed -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "^mx.signed.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6 ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::1

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, signed with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.signed -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep ::2 dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, unsigned with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep ::5 dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "ANSWER: 0" dig.out.ns4.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "ANSWER: 0" dig.out.ns4.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed +dnssec -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "ANSWER: 0" dig.out.ns4.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "ANSWER: 0" dig.out.ns4.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.2 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep ::6 dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.signed -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns4.test$n > /dev/null || ret=1

grep "::3" dig.out.ns4.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns4.test$n > /dev/null || ret=1

grep "::6" dig.out.ns4.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.signed +dnssec -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns4.test$n > /dev/null || ret=1

grep ::3 dig.out.ns4.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned +dnssec -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns4.test$n > /dev/null || ret=1

grep "::6" dig.out.ns4.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.2 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1

grep 1.0.0.6 dig.out.ns4.test$n > /dev/null || ret=1

grep ::6 dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6 with break-dnssec ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::4

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::4 @fd92:7065:b8e:ffff::4 > dig.out.ns4.test$n || ret=1

grep 2001:db8::6 dig.out.ns4.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=NS, with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add ns unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep AAAA dig.out.ns4.test$n > /dev/null 2>&1 && ret=1

grep "ADDITIONAL: 2" dig.out.ns4.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns4.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, signed, with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx signed -b 10.53.0.4 @10.53.0.4 > dig.out.ns4.test$n || ret=1

grep "^mx.signed.*AAAA" dig.out.ns4.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6, with break-dnssec ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::4

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b fd92:7065:b8e:ffff::4 @fd92:7065:b8e:ffff::4 > dig.out.ns4.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns4.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, signed, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.signed -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep ::2 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.unsigned -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep ::5 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "ANSWER: 0" dig.out.ns2.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "ANSWER: 0" dig.out.ns2.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed +dnssec -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep ::3 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned +dnssec -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "ANSWER: 0" dig.out.ns2.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.1 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep ::6 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY recursive ($n)"

ret=0

$DIG $DIGOPTS any dual.signed -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns2.test$n > /dev/null || ret=1

grep "::3" dig.out.ns2.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY recursive ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns2.test$n > /dev/null || ret=1

grep "::6" dig.out.ns2.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set, recursive ($n)"

ret=0

$DIG $DIGOPTS any dual.signed +dnssec -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep ::3 dig.out.ns2.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set, recursive ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned +dnssec -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns2.test$n > /dev/null || ret=1

grep "::6" dig.out.ns2.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.1 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "status: NOERROR" dig.out.ns2.test$n > /dev/null || ret=1

grep 1.0.0.6 dig.out.ns2.test$n > /dev/null || ret=1

grep ::6 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6, recursive ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::2

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::2 @fd92:7065:b8e:ffff::2 > dig.out.ns2.test$n || ret=1

grep 2001:db8::6 dig.out.ns2.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=NS ($n)"

ret=0

$DIG $DIGOPTS +add ns unsigned -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep AAAA dig.out.ns2.test$n > /dev/null 2>&1 && ret=1

grep "ADDITIONAL: 2" dig.out.ns2.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, unsigned ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns2.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, signed ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx signed -b 10.53.0.2 @10.53.0.2 > dig.out.ns2.test$n || ret=1

grep "^mx.signed.*AAAA" dig.out.ns2.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6 ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::2

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b fd92:7065:b8e:ffff::2 @fd92:7065:b8e:ffff::2 > dig.out.ns2.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns2.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, signed, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.signed -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep ::2 dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.unsigned -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep ::5 dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "ANSWER: 0" dig.out.ns3.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "ANSWER: 0" dig.out.ns3.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed +dnssec -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "ANSWER: 0" dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned +dnssec -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "ANSWER: 0" dig.out.ns3.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.1 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep ::6 dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.signed -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns3.test$n > /dev/null || ret=1

grep "::3" dig.out.ns3.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns3.test$n > /dev/null || ret=1

grep "::6" dig.out.ns3.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.signed +dnssec -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns3.test$n > /dev/null || ret=1

grep ::3 dig.out.ns3.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned +dnssec -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns3.test$n > /dev/null || ret=1

grep "::6" dig.out.ns3.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b 10.53.0.1 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "status: NOERROR" dig.out.ns3.test$n > /dev/null || ret=1

grep 1.0.0.6 dig.out.ns3.test$n > /dev/null || ret=1

grep ::6 dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6, recursive with break-dnssec ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::3

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::3 @fd92:7065:b8e:ffff::3 > dig.out.ns3.test$n || ret=1

grep 2001:db8::6 dig.out.ns3.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=NS, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add ns unsigned -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep AAAA dig.out.ns3.test$n > /dev/null 2>&1 && ret=1

grep "ADDITIONAL: 2" dig.out.ns3.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns3.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, signed, recursive with break-dnssec ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx signed -b 10.53.0.3 @10.53.0.3 > dig.out.ns3.test$n || ret=1

grep "^mx.signed.*AAAA" dig.out.ns3.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6, recursive with break-dnssec ($n)"

if $TESTSOCK6 fd92:7065:b8e:ffff::3

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b fd92:7065:b8e:ffff::3 @fd92:7065:b8e:ffff::3 > dig.out.ns3.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns3.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

echo "I: skipped."

$TESTSOCK6 fd92:7065:b8e:ffff::1 || {

echo "I:reconfiguring servers"

cp -f ns1/named2.conf ns1/named.conf

$RNDC -c ../common/rndc.conf -s 10.53.0.1 -p 9953 reconfig 2>&1 | sed 's/^/I:ns1 /'

cp -f ns2/named2.conf ns2/named.conf

$RNDC -c ../common/rndc.conf -s 10.53.0.2 -p 9953 reconfig 2>&1 | sed 's/^/I:ns2 /'

cp -f ns3/named2.conf ns3/named.conf

$RNDC -c ../common/rndc.conf -s 10.53.0.3 -p 9953 reconfig 2>&1 | sed 's/^/I:ns3 /'

cp -f ns4/named2.conf ns4/named.conf

$RNDC -c ../common/rndc.conf -s 10.53.0.4 -p 9953 reconfig 2>&1 | sed 's/^/I:ns4 /'

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, signed ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.signed -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep ::2 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when only AAAA record exists, unsigned ($n)"

ret=0

$DIG $DIGOPTS aaaa aaaa-only.unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep ::5 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.signed +dnssec -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep ::3 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b fd92:7065:b8e:ffff::2 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep ::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY ($n)"

ret=0

$DIG $DIGOPTS any dual.signed -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns1.test$n > /dev/null || ret=1

grep "::3" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns1.test$n > /dev/null || ret=1

grep "::6" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set ($n)"

ret=0

$DIG $DIGOPTS any dual.signed +dnssec -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep ::3 dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.3" dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned +dnssec -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep "1.0.0.6" dig.out.ns1.test$n > /dev/null || ret=1

grep "::6" dig.out.ns1.test$n > /dev/null && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl ($n)"

ret=0

$DIG $DIGOPTS any dual.unsigned -b fd92:7065:b8e:ffff::2 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1

grep 1.0.0.6 dig.out.ns1.test$n > /dev/null || ret=1

grep ::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv4 ($n)"

ret=0

$DIG $DIGOPTS aaaa dual.unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep 2001:db8::6 dig.out.ns1.test$n > /dev/null || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=NS ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec ns unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep AAAA dig.out.ns1.test$n > /dev/null 2>&1 && ret=1

grep "ADDITIONAL: 2" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is omitted from additional section, qtype=MX, unsigned ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 && ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, signed ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx signed -b fd92:7065:b8e:ffff::1 @fd92:7065:b8e:ffff::1 > dig.out.ns1.test$n || ret=1

grep "^mx.signed.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`

n=`expr $n + 1`

echo "I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv4 ($n)"

ret=0

$DIG $DIGOPTS +add +dnssec mx unsigned -b 10.53.0.1 @10.53.0.1 > dig.out.ns1.test$n || ret=1

grep "^mx.unsigned.*AAAA" dig.out.ns1.test$n > /dev/null 2>&1 || ret=1

if [ $ret != 0 ]; then echo "I:failed"; fi

status=`expr $status + $ret`