; config options
server:
	access-control: 127.0.0.0/8 refuse
	ede: yes
CONFIG_END

SCENARIO_BEGIN Test ede-acl-refused
; Scenario overview:
; - query for example.com. A record with EDNS
; - check that we get a refused answer with EDE (RFC8914) code 18 - Prohibited

; Query without RD flag
STEP 1 QUERY
ENTRY_BEGIN
	REPLY RD
	SECTION QUESTION
		example.com. IN A
	SECTION ADDITIONAL
		HEX_EDNSDATA_BEGIN
	    HEX_EDNSDATA_END
ENTRY_END

; Check that we got ede 18
STEP 2 CHECK_ANSWER
ENTRY_BEGIN
	MATCH all ede=18
	REPLY QR RD REFUSED
	SECTION QUESTION
		example.com. IN A
	SECTION ADDITIONAL
		HEX_EDNSDATA_BEGIN
	    HEX_EDNSDATA_END
ENTRY_END

SCENARIO_END