Work in progress!

Follow IntoDNS on Twitter


Category Status Test name Information
Parent Info Domain NS records Nameserver records returned by the parent servers are:

dns2.cantv.net.   ['200.109.76.11'] (NO GLUE)   [TTL=18000]
dns1.cantv.net.   ['200.44.32.10'] (NO GLUE)   [TTL=18000]

ns3.nic.ve was kind enough to give us that information.

Warn TLD Parent Check WARNING: Looks like the parent servers do not have information for your TLD when asked. This is ok but can be confusing.
Pass Your nameservers are listed Good. The parent server ns3.nic.ve has your nameservers listed. This is a must if you want to be found as anyone that does not know your DNS servers will first ask the parent nameservers.
Info DNS Parent sent Glue The parent nameserver ns3.nic.ve is not sending out GLUE for every nameservers listed, meaning he is sending out your nameservers host names without sending the A records of those nameservers. It's ok but you have to know that this will require an extra A lookup that can delay a little the connections to your site. This happens a lot if you have nameservers on different TLD (domain.com for example with nameserver ns.domain.org.)
Pass Nameservers A records Good. Every nameserver listed has A records. This is a must if you want to be found.
NS Info NS records from your nameserversNS records got from your nameservers listed at the parent NS are:

dns2.cantv.net  ['200.109.76.11']   [TTL=86400]
dns1.cantv.net  ['200.44.32.10']   [TTL=86400]

Pass Recursive Queries Good. Your nameservers (the ones reported by the parent server) do not report that they allow recursive queries for anyone.
Pass Same Glue The A records (the GLUE) got from the parent zone check are the same as the ones got from your nameservers. You have to make sure your parent server has the same NS records for your zone as you do according to the RFC. This tests only nameservers that are common at the parent and at your nameservers. If there are any missing or stealth nameservers you should see them below!
Information Glue for NS records INFO: GLUE was not sent when I asked your nameservers for your NS records.This is ok but you should know that in this case an extra A record lookup is required in order to get the IPs of your NS records. The nameservers without glue are:
200.109.76.11
200.44.32.10
You can fix this for example by adding A records to your nameservers for the zones listed above.
Pass Mismatched NS records OK. The NS records at all your nameservers are identical.
Pass DNS servers responded Good. All nameservers listed at the parent server responded.
Pass Name of nameservers are valid OK. All of the NS records that your nameservers report seem valid.
Pass Multiple Nameservers Good. You have multiple nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me.
Pass Nameservers are lame OK. All the nameservers listed at the parent servers answer authoritatively for your domain.
Pass Missing nameservers reported by parent OK. All NS records are the same at the parent and at your nameservers.
Pass Missing nameservers reported by your nameservers OK. All nameservers returned by the parent server ns3.nic.ve are the same as the ones reported by your nameservers.
Pass Domain CNAMEs OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
Pass NSs CNAME check OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
Pass Different subnets OK. Looks like you have nameservers on different subnets!
Pass IPs of nameservers are public Ok. Looks like the IP addresses of your nameservers are public. This is a good thing because it will prevent DNS delays and other problems like
Pass DNS servers allow TCP connection OK. Seems all your DNS servers allow TCP connections. This is a good thing and useful even if UDP connections are used by default.
Pass Different autonomous systems OK. It seems you are safe from a single point of failure. You must be careful about this and try to have nameservers on different locations as it can prevent a lot of problems if one nameserver goes down.
Pass Stealth NS records sent Ok. No stealth ns records are sent
SOA Info SOA recordThe SOA record is:
Primary nameserver: localhost.seniat.gov.ve
Hostmaster E-mail address: hostmaster.cantv.net
Serial #: 2023102000
Refresh: 172800
Retry: 3600
Expire: 1728000   2 weeks
Default TTL: 172800
Pass NSs have same SOA serial OK. All your nameservers agree that your SOA serial number is 2023102000.
Warn SOA MNAME entry WARNING: SOA MNAME (localhost.seniat.gov.ve) is not listed as a primary nameserver at your parent nameserver!
Pass SOA Serial Your SOA serial number is: 2023102000. This appears to be in the recommended format of YYYYMMDDnn.
Warn SOA REFRESH WARNING: Your SOA REFRESH interval is: 172800. That is not so ok
Pass SOA RETRY Your SOA RETRY value is: 3600. Looks ok
Pass SOA EXPIRE Your SOA EXPIRE number is: 1728000.Looks ok
Warn SOA MINIMUM TTL Your SOA MINIMUM TTL value is: 172800. This value seems a little high. You should consider decreasing this value to about 1-3 hours as recommanded by RFC2308. This value was used to serve as a default TTL for records without a given TTL value and now is used for negative caching (indicates how long a resolver may cache the negative answer). RFC2308 recommends a value of 1-3 hours.
MX Error MX RecordsOh well, I did not detect any MX records so you probably don't have any and if you know you should have then they may be missing at your nameservers!
WWW Error WWW A Record ERROR: I could not get any A records for www.seniat.gov.ve!

(I only do a cache request, if you recently added a WWW A record, it might not show up here.)

Processed in 8.737 seconds.