DNSreport - cdi.ul.ie.
| Category | Status | Test name | Information | |||
|---|---|---|---|---|---|---|
| Parent | PASS | Parent nameservers have your nameservers listed | OK. When someone uses DNS to look up your domain, the first step (if it doesn't already know about your domain) is to go to the parent servers. | |||
| PASS | DNS servers have A records | OK. All your DNS servers either have A records at the zone parent servers, or do not need them. | ||||
| INFO | NS records at parent servers | Your NS records at the parent servers are:
| ||||
| NS | INFO | NS records at your nameservers | Your NS records at your nameservers are: source.cdi.ul.ie. mercury.ul.ie. | |||
| PASS | No NS A records at nameservers | OK. Your nameservers do include corresponding A records when asked for your NS records. This ensures that your DNS servers know the A records corresponding to all your NS records. | ||||
| PASS | Open DNS servers | OK. Your DNS servers do not announce that they are open DNS servers. Although there is a slight chance that they really are open DNS servers, this is very unlikely. Open DNS servers increase the chances that of cache poisoning, can degrade performance of your DNS, and can cause your DNS servers to be used in an attack (so it is good that your DNS servers do not appear to be open DNS servers). | ||||
| PASS | All nameservers report identical NS records | OK. The NS records at all your nameservers are identical. | ||||
| PASS | All nameservers respond | OK. All of your nameservers listed at the parent nameservers responded. | ||||
| FAILED | Number of nameservers | FAILED. You have 1 nameservers. You must have at least 2 nameservers. | ||||
| PASS | Missing nameservers | OK. All of the nameservers listed at the parent nameservers are also listed as NS records at your nameservers. | ||||
| FAILED | Missing nameservers (reversed) | FAILED. Not all 2 of your nameservers (as reported by your nameservers) are also listed at the parent servers. | ||||
| PASS | No CNAMEs for domain | OK. There are no CNAMEs for cdi.ul.ie. | ||||
| PASS | No NSs with CNAMEs | OK. There are no CNAMEs for your NS records. | ||||
| PASS | Nameservers on separate class C | OK. You have nameservers on different Class C (technically, /24) IP ranges. You must have nameservers at geographically and topologically dispersed locations. | ||||
| PASS | All NS IPs public | OK. All of your NS records appear to use public IPs. If there were any private IPs, they would not be reachable, causing DNS delays. | ||||
| PASS | TCP Allowed | OK. All your DNS servers allow TCP connections. Although rarely used, TCP connections are occasionally used instead of UDP connections. When firewalls block the TCP DNS connections, it can cause hard-to-diagnose problems. | ||||
| INFO | Nameservers versions | Your nameservers have the following versions: source.cdi.ul.ie. (193.1.101.122): ISC BIND 9.2.3rc1 -- 9.4.0a0 | ||||
| SOA | INFO | SOA record | Your SOA record is: Primary DNS server: source.cdi.ul.ie. Responsible Name: cdi.ul.ie. Serial: 2009110207 Refresh: 43200 Retry: 7200 Expire: 1209600 Minimum/NegTTL: 86400 | |||
| PASS | NS agreement on SOA Serial | OK. All your nameservers agree that your SOA serial number is 2009110207. | ||||
| PASS | SOA MNAME Check | OK. Your SOA (Start of Authority) record states that your master (primary) name server is: source.cdi.ul.ie. That server is listed at the parent servers, which is correct. | ||||
| PASS | SOA RNAME Check | OK. Your SOA (Start of Authority) record states that your DNS contact E-mail address is: cdi@ul.ie. (techie note: we have changed the initial '.' to an '@' for display purposes). | ||||
| PASS | SOA Serial Number | OK. Your SOA serial number is: 2009110207. This appears to be in the recommended format of YYYYMMDDnn, where 'nn' is the revision. So this indicates that your DNS was last updated on 2 Nov 2009. | ||||
| PASS | SOA REFRESH value | OK. Your SOA REFRESH interval is: 43200 seconds. The normal interval is about 1200-43200 seconds (20 minutes to 12 hours). This value determines how often secondary/slave nameservers check with the master for updates. | ||||
| PASS | SOA RETRY value | OK. Your SOA RETRY interval is: 7200 seconds. The normal interval is about 120-7200 seconds. The retry value is the amount of time your secondary/slave nameservers will wait to contact the master nameserver again if the last attempt failed. | ||||
| PASS | SOA EXPIRE value | OK. Your SOA EXPIRE time: 1209600 seconds. The normal interval is about 1209600-2419200 seconds (2-4 weeks). This is how long a secondary/slave nameserver will wait before considering its DNS data stale if it can't reach the primary nameserver. | ||||
| WARN | SOA MINIMUM TTL value | WARNING. Your SOA MINIMUM TTL is: 86400 seconds. The normal interval is about 3600-10800 seconds (1-3 hours). This value used to determine the default (technically, minimum) TTL (time-to-live) for DNS entries, but now is used for negative caching. | ||||
| MX | INFO | MX Record | Your 1 MX records are:
| |||
| PASS | Invalid characters | OK. All of your MX records appear to use valid hostnames, without any invalid characters. | ||||
| PASS | All MX IPs public | OK. All of your MX records appear to use public IPs. If there were any private IPs, they would not be reachable, causing slight mail delays, extra resource usage, and possibly bounced mail. | ||||
| PASS | MX records are not CNAMEs | OK. Looking up your MX record did not just return a CNAME. If an MX record query returns a CNAME, extra processing is required, and some mail servers may not be able to handle it. | ||||
| PASS | MX is host name, not IP | OK. All of your MX records are host names (as opposed to IP addresses, which are not allowed in MX records). | ||||
| FAILED | Multiple MX records | FAILED. You do not have multiple MX records. This means that if one is down or unreachable, the other(s) will be able to accept mail for you. | ||||
| PASS | Differing MX-A records | OK. I did not detect differing IPs for your MX records. This would happen if your DNS servers return different IPs than the DNS servers that are authoritative for the hostname in your MX records. | ||||
| PASS | Duplicate MX records | OK. You do not have any duplicate MX records (pointing to the same IP). Although technically valid, duplicate MX records can cause a lot of confusion, and waste resources. | ||||
| PASS | Reverse DNS entries for MX records | OK. The IPs of all of your mail server(s) have reverse DNS (PTR) entries. The reverse DNS entries are:
| ||||
| FAILED | Connect to mail servers | FAILED. You were not able to connect to: cdi.ul.ie. | ||||
| PASS | Mail server host name in greeting | OK. All of your mailservers have their host name in the greeting: Unable to connect to host cdi.ul.ie. | ||||
| INFO | Sending test mail | Unable to connect to host cdi.ul.ie. | ||||
| PASS | Open relay test | OK. All of your mailservers appear to be closed to relaying.
| ||||
| FAILED | SPF record | FAILED. You don't seem to have an SPF record. This is not very good, as the SPF record helps to prevent spammers from abusing your domain. | ||||
| WWW | INFO | WWW Record | Your www.cdi.ul.ie. A record is: www.cdi.ul.ie. CNAME cdi.ul.ie. [TTL=14400] cdi.ul.ie. A 193.1.101.58 [TTL=14400] | |||
| PASS | All WWW IPs public | OK. All of your WWW IPs appear to be public IPs. If there were any private IPs, they would not be reachable, causing problems reaching your web site. | ||||
| FAILED | CNAME Lookup | FAILED. Your web site (www.cdi.ul.ie.) has a CNAME record. | ||||
| INFO | Domain A Lookup | Your cdi.ul.ie. A record is: cdi.ul.ie. A 193.1.101.58 [TTL=3410] | ||||
| PASS | Connect to HTTP servers | OK. You were able to connect to all of your HTTP servers. www.cdi.ul.ie. [193.1.101.58]: HTTP/1.1 200 OK Date: Tue, 09 Feb 2010 03:03:20 GMT Server: Apache/2.2.13 (Unix) mod_ssl/2.2.13 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.2.10 |