# -*- mmm-classes: donuts-perl -*-
# Copyright 2006-2011 SPARTA, Inc.  All rights reserved.
# See the COPYING file included with the DNSSEC-Tools package for details.
#
# This file implements rules to check live nameservers for served data
#

#
# memorize NS records for a zone
#
name: MEMORIZE_NS_ADDRS
internal: yes
level: 1
feature: check_data
type: NS
<test>
  if ($record->name eq $current_domain) {
    $DONUTS::DNSSEC::NSADDRS{$record->nsdname} = $record->name;
  }
  return;
</test>

name: DNS_SERVERS_MATCH_DATA
ruletype: name
level: 5
noindent: 1
feature: check_data
desc: Checks to see if each of the zone's name servers are properly serving the zone's data.
<test>
  my @results;

  # check each resolver from our memorized NS records for data
  foreach my $ns (keys(%DONUTS::DNSSEC::NSADDRS)) {
      # create a resolver directly to this NS server
      my $resolver = Net::DNS::Resolver->new(nameservers => [$ns],
					     recurse => 0);

      # query the NS server for each record type and compare the results
      foreach my $recordtype (keys(%$records)) {
	  my @answers = live_query($recordname, $recordtype, $resolver);
	  my $cmpresult = compare_arrays($records->{$recordtype}, \@answers,
	  			         sub { $a->string cmp $b->string });
	  if ($cmpresult != 0) {
	      my $err = 
		"query to $ns for $recordtype of $recordname doesn't match ($cmpresult):\n";
	      $err .= "    live records:\n";
	      map { $err .= "      ".$_->string()."\n"; } @answers;
 	      $err .= "    loaded records: \n";
	      map { $err .= "      ".$_->string()."\n"; } @{$records->{$recordtype}};
#  	      use Data::Dumper;
#  	      $err .= Dumper(\@answers);
#  	      $err .= Dumper($records->{$recordtype});
	      donuts_error($err);
	  } else {
#  	      print STDERR "matched ($#answers = $#{$records->{$recordtype}}): $recordtype:$recordname from server $ns\n";
#  	      if ($recordname =~ /domainkey/) {
#  		  print STDERR "    live records:\n";
#  		  map { print STDERR  "      ".$_->string()."\n"; } @answers;
#  		  print STDERR  "    loaded records: \n";
#  		  map { print STDERR  "      ".$_->string()."\n"; } @{$records->{$recordtype}};
#  	      }
	  }
      }
  }
</test>