/usr/share/zonecheck/test/ns.rb is in zonecheck 3.0.5-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | # ZCTEST 1.0
# $Id: ns.rb,v 1.21 2010/06/07 08:51:25 chabannf Exp $
#
# CONTACT : zonecheck@nic.fr
# AUTHOR : Stephane D'Alu <sdalu@nic.fr>
#
# CREATED : 2002/08/02 13:58:17
# REVISION : $Revision: 1.21 $
# DATE : $Date: 2010/06/07 08:51:25 $
#
# CONTRIBUTORS: (see also CREDITS file)
#
#
# LICENSE : GPL v3
# COPYRIGHT : AFNIC (c) 2003
#
# This file is part of ZoneCheck.
#
# ZoneCheck is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# ZoneCheck is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with ZoneCheck; if not, write to the Free Software Foundation,
# Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
require 'framework'
module CheckNetworkAddress
##
## Check domain NS records
##
class NS < Test
with_msgcat 'test/ns.%s'
#-- Checks --------------------------------------------------
# DESC: NS entries should exists
def chk_ns(ns, ip)
! ns(ip).empty?
end
# DESC: NS answers should be authoritative
def chk_ns_auth(ns, ip)
ns(ip, @domain.name) # request should be done twice
ns(ip, @domain.name, true)[0].aa # so we need to force the cache
end
# DESC: Ensure coherence between NS and ANY
def chk_ns_vs_any(ns, ip)
ns(ip).unsorted_eql?(any(ip, Dnsruby::RR::IN::NS))
end
# DESC: NS record should have a valid hostname syntax
def chk_ns_sntx(ns, ip)
ns(ip).each { |n|
if ! is_valid_hostname?(n.rdata)
return false
end
}
true
end
# DESC: NS record should not point to CNAME alias
def chk_ns_cname(ns, ip)
ns(ip).each { |n| return false if is_cname?(n.rdata, ip) }
true
end
# DESC: NS host should be resolvable
def chk_ns_ip(ns, ip)
ns(ip).each { |n|
unless is_resolvable?(n.rdata, ip, @domain.name)
return { 'name' => n.rdata.to_s }
end
}
true
end
end
end
|