Category | Status | Test name | Information send feedback |
---|---|---|---|
Parent | Domain NS records | Nameserver records returned by the parent servers are: ns2.directnic.com. ['104.143.9.42'] (NO GLUE) [TTL=3600] ns3.directnic.com. ['104.219.54.42'] (NO GLUE) [TTL=3600] ns1.directnic.com. ['104.245.32.254'] (NO GLUE) [TTL=3600] ns0.directnic.com. ['104.143.9.41'] (NO GLUE) [TTL=3600] d0.org.afilias-nst.org was kind enough to give us that information.
| |
TLD Parent Check | Good. d0.org.afilias-nst.org, the parent server I interrogated, has information for your TLD. This is a good thing as there are some other domain extensions like "co.us" for example that are missing a direct check. | ||
Your nameservers are listed | Good. The parent server d0.org.afilias-nst.org has your nameservers listed. This is a must if you want to be found as anyone that does not know your DNS servers will first ask the parent nameservers. | ||
DNS Parent sent Glue | The parent nameserver d0.org.afilias-nst.org is not sending out GLUE for every nameservers listed, meaning he is sending out your nameservers host names without sending the A records of those nameservers. It's ok but you have to know that this will require an extra A lookup that can delay a little the connections to your site. This happens a lot if you have nameservers on different TLD (domain.com for example with nameserver ns.domain.org.) | ||
Nameservers A records | Good. Every nameserver listed has A records. This is a must if you want to be found. | ||
NS | NS records from your nameservers | NS records got from your nameservers listed at the parent NS are: Oups! I could not get any nameservers from your nameservers (the ones listed at the parent server). Please verify that they are not lame nameservers and are configured properly. |
|
Recursive Queries | Good. Your nameservers (the ones reported by the parent server) do not report that they allow recursive queries for anyone. | ||
Same Glue | Hmm,I do not consider this to be an error yet, since I did not detect any nameservers at your nameservers. | ||
Glue for NS records | OK. Your nameservers (the ones reported by the parent server) have no ideea who your nameservers are so this will be a pass since you already have a lot of errors! | ||
Mismatched NS records | WARNING: One or more of your nameservers did not return any of your NS records. | ||
DNS servers responded | Good. All nameservers listed at the parent server responded. | ||
Name of nameservers are valid | OK. The nameservers reported by the parent send out nothing as shown above. I can't check nothing so it's a green! | ||
Multiple Nameservers | ERROR: Looks like you have less than 2 nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me. | ||
Nameservers are lame | OK. All the nameservers listed at the parent servers answer authoritatively for your domain. | ||
Missing nameservers reported by parent | OK. All NS records are the same at the parent and at your nameservers. | ||
Missing nameservers reported by your nameservers | You should already know that your NS records at your nameservers are missing, so here it is again:
ns2.directnic.com. ns3.directnic.com. ns1.directnic.com. ns0.directnic.com. |
||
Domain CNAMEs | OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present. | ||
NSs CNAME check | ERROR: The problem NS records are:
effectivechildtherapy.org |
||
Different subnets | OK. Looks like you have nameservers on different subnets! | ||
IPs of nameservers are public | Ok. Looks like the IP addresses of your nameservers are public. This is a good thing because it will prevent DNS delays and other problems like | ||
DNS servers allow TCP connection | OK. Seems all your DNS servers allow TCP connections. This is a good thing and useful even if UDP connections are used by default. | ||
Different autonomous systems | OK. It seems you are safe from a single point of failure. You must be careful about this and try to have nameservers on different locations as it can prevent a lot of problems if one nameserver goes down. | ||
Stealth NS records sent | Ok. No stealth ns records are sent | ||
SOA | SOA record | The SOA record is: Primary nameserver: ns0.directnic.com Hostmaster E-mail address: hostmaster.directnic.com Serial #: 2015011212 Refresh: 28800 Retry: 14400 Expire: 604800 1 weeks Default TTL: 86400 |
|
NSs have same SOA serial | OK. All your nameservers agree that your SOA serial number is 2015011212. | ||
SOA MNAME entry | OK. ns0.directnic.com That server is listed at the parent servers. | ||
SOA Serial | Your SOA serial number is: 2015011212. This appears to be in the recommended format of YYYYMMDDnn. | ||
SOA REFRESH | OK. Your SOA REFRESH interval is: 28800. That is OK | ||
SOA RETRY | Your SOA RETRY value is: 14400. That is NOT OK | ||
SOA EXPIRE | Your SOA EXPIRE number is: 604800.Looks ok | ||
SOA MINIMUM TTL | Your SOA MINIMUM TTL is: 86400. This value was used to serve as a default TTL for records without a given TTL value and now is used for negative caching (indicates how long a resolver may cache the negative answer). RFC2308 recommends a value of 1-3 hours. Your value of 86400 is OK. | ||
MX | MX Records | Oh well, I did not detect any MX records so you probably don't have any and if you know you should have then they may be missing at your nameservers! |
|
WWW | WWW A Record |
Your www.effectivechildtherapy.org A record is: www.effectivechildtherapy.org -> marcotech19.mctci.com -> [ 35.168.224.111 ] [Looks like you have CNAME's] |
|
IPs are public | OK. All of your WWW IPs appear to be public IPs. | ||
WWW CNAME | OK. You do have a CNAME record for www.effectivechildtherapy.org.Your CNAME entry also returns the A record for the CNAME entry, which is good. |
Processed in 0.767 seconds.