// validating resolver

options {
	{% include_indented "_common/options.conf.j2" %}
	dnssec-validation yes;
	synth-from-dnssec yes;
};

{% include "_common/controls.conf.j2" %}

{% include "_common/root.hint.conf" %}

zone "f004.test" {
	type static-stub;
	server-addresses { 10.53.0.1; };
};

zone "f007.test" {
	type static-stub;
	server-addresses { 10.53.0.3; };
};

zone "f023.test" {
	type static-stub;
	server-addresses { 10.53.0.1; };
};

zone "evil.f023.test" {
	type static-stub;
	server-addresses { 10.53.0.1; };
};

trust-anchors {
	f004.test. static-key 257 3 13 "@DNSKEY@";
	f007.test. static-key 257 3 13 "@DNSKEY@";
	f023.test. static-key 257 3 13 "@DNSKEY@";
};