{"id":632,"date":"2018-07-05T13:12:30","date_gmt":"2018-07-05T13:12:30","guid":{"rendered":"http:\/\/blog.nixwind.com\/?p=632"},"modified":"2018-07-05T13:12:30","modified_gmt":"2018-07-05T13:12:30","slug":"dns-check-with-intodns","status":"publish","type":"post","link":"https:\/\/blog.nixwind.com\/?p=632","title":{"rendered":"DNS check with intodns"},"content":{"rendered":"

Into DNS Description<\/strong><\/span><\/span><\/p>\n

IntoDNS checks the health and configuration and provides DNS report and mail servers report. It also provides suggestions to fix and improve them, with references to protocols\u2019 official documentation.<\/span><\/p>\n

www.intodns.com<\/p>\n

Please enter the Domain Name that you wants to check the DNS report<\/span><\/p>\n

While we checked a domain name with intodns we get a detailed report about DNS report. The detailed DNS report are divided into five major sections.<\/span><\/p>\n

The five major sections are below<\/span><\/p>\n

1) Parent <\/span><\/p>\n

2) NS – Name Server<\/span><\/p>\n

3) SOA – Start of Authority<\/span><\/p>\n

4) MX – Mail Exchanger Record<\/span><\/p>\n

5) www
\n<\/span><\/p>\n

1) Parent Servers<\/strong><\/span><\/p>\n

The output of <\/span><\/span>dns report for your domain, shows the NS records at the parent server.<\/span><\/span><\/span><\/p>\n

Parent Server are the original authenticate servers from which the new domain arise.For example in google.com the parent server of com is the root server(.) The parent server of google is .com<\/span><\/span><\/span><\/p>\n

 <\/p>\n

a) <\/span><\/span><\/span>Domain NS records<\/span><\/span><\/p>\n

It is the name server output returned by the parent servers (ie,when we check a domain name it forward a request to 13 root name servers ranges from A to M. The root servers has all the updated details from the registrant end.)<\/span><\/span><\/p>\n

OUTPUT<\/span><\/span><\/span><\/p>\n

We can see any 2 or 3 nameserver name,its ip and <\/span><\/span>Time to live (TTL) value.<\/span><\/span><\/p>\n

Time to live<\/span><\/span> (<\/span><\/span>TTL<\/span><\/span>) is a mechanism that limits the lifespan of data in a computer or network. When a caching (recursive) nameserver queries the authoritative nameserver for a resource record, it will cache that record for the time (in seconds) specified by the TTL. If a stub resolver queries the caching nameserver for the same record before the TTL has expired, the caching server will simply reply with the already cached resource record rather than retrieve it from the authoritative nameserver again.<\/span><\/span><\/em><\/strong><\/p>\n

The corresponding name of the root nameserver from which the request domain query executed in the output.<\/span><\/span><\/p>\n

b) TLD Parent Check<\/span><\/span><\/p>\n

We can also display the result of Top Level Domain check in the parent server that we interrogated,(ie,the output from any 13 root nameserver form which the request domain query executed)<\/span><\/span><\/p>\n

<\/p>\n

c) Your nameservers are listed<\/span><\/span><\/p>\n

In this entry it check whether the parent server (ie,the output from any 13 root nameserver form which the request domain query executed) has your nameservers entry.<\/span><\/span><\/p>\n

d) DNS Parent sent Glue<\/span><\/span><\/p>\n

A glue record is a hint that is provided by the parent DNS server. In the case of shibin.com, the .com GLTD (Global Top Level Domain) servers would provide the glue records. The glue records are simply additional A records that are returned with the DNS response. These additional A records allow the DNS client to locate the name servers.<\/span><\/span><\/p>\n

A glue record is the<\/span><\/span> IP address of a name server held at the domain name registry.
\nGlue records are required when you wish to set the of a domain name to a hostname <\/span><\/span> under the domain name itself.<\/span><\/span>
\nFor example if you wished to set the name servers of example.com to ns1.example.com and ns2.example.com you would need to also provide the glue records (i.e. the IP addresses) for ns1.example.com and ns2.example.com.<\/span><\/span><\/p>\n

If you did not provide the glue records for these name servers then your domain name would not work as anyone requiring DNS <\/span><\/span> information for it would get stuck in a loop:<\/span><\/span><\/p>\n

What is the name server for example.com? -> ns1.example.com
\nWhat is the IP address of ns1.example.com? -> don’t know, try looking at name server for example.com
\nWhat is the name server for example.com? -> ns1.example.com<\/p>\n

…and so on.<\/p>\n

With the glue record in place the registry will hold the IP address and the loop will not occur:<\/p>\n

Without a proper glue an extra A record lookup is required in order to get the IPs of your NS records.<\/span><\/span><\/p>\n

e) Nameservers A records<\/span><\/span><\/p>\n

This must check every nameserver listed in parent server has A records.<\/span><\/span><\/p>\n

A record is the actual record that which one and only IP address at which the domain pointed.<\/span><\/span><\/p>\n

2) NS – Name Server<\/strong><\/span><\/span><\/p>\n

In this section the output will get from name server end<\/span><\/span><\/p>\n

 <\/p>\n

a) NS records from your nameservers<\/span><\/span><\/p>\n

NS records got from your nameservers listed at the parent NS<\/span><\/span><\/p>\n

 <\/p>\n

b) <\/span><\/span>Recursive Queries<\/span><\/span><\/p>\n

A recursive query is one where the DNS server will fully answer the query (or give an error).<\/span><\/span><\/p>\n

 <\/p>\n

c) Same Glue<\/p>\n

The A records (the GLUE) got from the parent zone check are the same as the ones got from your nameservers.This tests only nameservers that are common at the parent and at your nameservers. <\/span><\/span><\/p>\n

d) Glue for NS records<\/span><\/span><\/p>\n

When I asked your nameservers for your NS records they also returned the A records for the NS records. This is a good thing as it will spare an extra A lookup needed to find those A records.<\/span><\/span><\/p>\n

e) Mismatched NS records<\/span><\/span><\/p>\n

This will check whether identical ns record at our nameservers entry. Identical name server is okay<\/span><\/span><\/p>\n

f) DNS servers responded<\/span><\/span><\/p>\n

Check whether all nameservers listed at the parent server responded.<\/span><\/span><\/p>\n

 <\/p>\n

e) Name of nameservers are valid<\/span><\/span><\/p>\n

Check all our name servers have a specific IP<\/span><\/span><\/p>\n

f) Multiple Nameservers<\/span><\/span><\/p>\n

Check all our multiple name server is okay. We can add multiple nameservers upto 7<\/span><\/span><\/p>\n

g) Nameservers are lame<\/span><\/span><\/p>\n

Checking all the name servers entry in parent server answer authoritatively<\/span><\/span><\/p>\n

h) Missing nameservers reported by parent<\/span><\/span><\/p>\n

Comparing ns record in parent and nameservers.<\/span><\/span><\/p>\n

i) Missing nameservers reported by your nameservers<\/span><\/span><\/p>\n

Its also the same comparision<\/span><\/span><\/p>\n

j) Domain CNAMEs<\/span><\/span><\/p>\n

Check whether any CNAME is present in the ns record.<\/span><\/span><\/p>\n

k) NS CNAME check<\/span><\/span><\/p>\n

Check whether any CNAME is present in the ns record.<\/span><\/span><\/p>\n

l) Different subnets<\/span><\/span><\/p>\n

Check whether nameservers have different subnets.<\/span><\/span><\/p>\n

m) IPs of nameservers are public<\/span><\/span><\/p>\n

To prevent DNS delay the ip address may be public.In this section it check whether the ip address is public.<\/span><\/span><\/p>\n

n) DNS servers allow TCP connection<\/span><\/span><\/p>\n

Checking whether DNS servers allow TCP connections.<\/span><\/span><\/p>\n

 <\/p>\n

 <\/p>\n

o) Different autonomous systems<\/span><\/span><\/p>\n

In this section it will check whether the name servers are from different location. So that it can prevent a lot of problems if one nameserver goes down.<\/span><\/span><\/p>\n

p) Stealth NS records sent <\/span><\/span><\/p>\n

A stealth server is defined as being a name server which does not appear in any publicly visible NS record for the domain. <\/span><\/span><\/p>\n

3) SOA <\/strong><\/span><\/span><\/p>\n

(Start of Authority) Record is the most essential part of a Zone file. A Zone file can contain only one SOA Record.The SOA resource record indicates that this DNS name server is the best source of information for the data within this DNS domain. <\/span><\/span><\/p>\n

A properly optimized and updated SOA record can reduce bandwidth between nameservers, increase the speed of website access and ensure the site is alive even when the primary DNS server is down.<\/span><\/span><\/p>\n

a) SOA record<\/span><\/span><\/p>\n

It display the following details<\/span><\/span><\/p>\n

Primary nameserver: <\/span><\/span>This is the zone’s master DNS server<\/p>\n

Hostmaster E-mail address: <\/span><\/span>This record specifies the email address of the person\/authority that is in charge of managing the domain name<\/p>\n

Serial #:<\/span><\/span>whenever a change to the zone file on the master DNS server is changed, the serial number must be increased by some value.That way, any slave server will know that an update has been made<\/span><\/span><\/p>\n

Refresh:<\/span><\/span>This value is configured to point the period at which the secondary or slave servers should poll the master server to check if the serial number of the zone file has been modified.<\/span><\/span><\/p>\n

Retry: <\/span><\/span>A value, typically an hour or less, that specifies the timeframe within which the slave server should repeat the update request, if the master DNS server for the zone has failed to answer its latest query<\/p>\n

Expire: <\/span><\/span>The ‘Expire’ value outlines the period of time for which the slave server will continue to use the existing data in case of a failure of the master DNS server.<\/p>\n

Default TTL: <\/span><\/span>TTL Negative responses (typically occurring when a requested record does not exist) can be also cached on non-authoritative servers. Small time periods are recommended (15min to 2h).<\/span><\/span><\/p>\n

 <\/p>\n

b) NSs have same SOA serial<\/span><\/span><\/p>\n

Check whether SOA serial may changed.<\/span><\/span><\/p>\n

 <\/p>\n

c) SOA MNAME entry <\/span><\/span><\/p>\n

Checking whether both nameserver and parent server has the same MNAME entry<\/span><\/span><\/p>\n

d) SOA Serial<\/span><\/span><\/p>\n

Check whether the serial number is in recommended format of YYYYMMDDnn.<\/span><\/span><\/p>\n

e) SOA REFRESH<\/span><\/span><\/p>\n

Check the refresh rate<\/span><\/span><\/p>\n

f) SOA RETRY<\/span><\/span><\/p>\n

Check the SOA RETRY value<\/span><\/span><\/p>\n

g) SOA EXPIRE<\/span><\/span><\/p>\n

Check the SOA EXPIRE number<\/span><\/span><\/p>\n

h) SOA MINIMUM TTL<\/span><\/span><\/p>\n

This value was used to serve as a default TTL for records without a given TTL value and now is used for negative caching (indicates how long a resolver may cache the negative answer)<\/span><\/span><\/p>\n

3)MX<\/span><\/span><\/p>\n

a) MX Records<\/span><\/span><\/p>\n

Your MX records that were reported by your nameservers<\/span><\/span><\/p>\n

b) Different MX records at nameservers<\/span><\/span><\/p>\n

Checking all your nameservers have the same set of MX records.This tests to see if there are any MX records not reported by all your nameservers and also MX records that have the same hostname but different Ips.<\/span><\/span><\/p>\n

c)MX name validity<\/span><\/span><\/p>\n

Checking result of invalid hostnames for your MX records<\/span><\/span><\/p>\n

d) MX IPs are public<\/span><\/span><\/p>\n

Checking The Ip are public.<\/span><\/span><\/p>\n

e) MX CNAME Check<\/span><\/span><\/p>\n

Checking the canonical name.<\/span><\/span><\/p>\n

f) MX A request returns CNAME<\/span><\/span><\/p>\n

Checking whether CNAMEs returned for A records lookups.<\/span><\/span><\/p>\n

g) MX is not IP<\/span><\/span><\/p>\n

Checking MX records are host names or IP. MX entry will be a hostname is an necessity.<\/span><\/span><\/p>\n

h) Number of MX records<\/span><\/span><\/p>\n

Checking the number of mail servers.You should be careful about what you are doing since you have a single point of failure that can lead to mail being lost if the server is down for a long time.<\/span><\/span><\/p>\n

i)Mismatched MX A<\/span><\/span><\/p>\n

Checking MX has different A record.<\/span><\/span><\/p>\n

j) Duplicate MX A records <\/span><\/span><\/p>\n

Checking duplicate IP(s) for your MX records.<\/span><\/span><\/p>\n

h) Reverse MX A records (PTR)<\/span><\/span><\/p>\n

Used to reveres map IP addresses to a FQDN. Checking whether Reverse MX A records exist.<\/span><\/span><\/p>\n

4) WWW<\/span><\/span><\/p>\n

a) WWW A Record<\/span><\/span><\/p>\n

Checking Whether we have a CNAME.<\/span><\/span><\/p>\n

b) IPs are public<\/span><\/span><\/p>\n

Checking whether WWW IPs appear to be public IPs. <\/span><\/span><\/p>\n

c) WWW CNAME<\/span><\/span><\/p>\n

Checking CNAME entry will returns the A record for the CNAME entry<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Into DNS Description IntoDNS checks the health and configuration and provides DNS report and mail servers report. It also provides suggestions to fix and improve them, with references to protocols\u2019 official documentation. www.intodns.com Please enter the Domain Name that you wants to check the DNS report While we checked a domain name with intodns we […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/posts\/632"}],"collection":[{"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=632"}],"version-history":[{"count":7,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/posts\/632\/revisions"}],"predecessor-version":[{"id":738,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=\/wp\/v2\/posts\/632\/revisions\/738"}],"wp:attachment":[{"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.nixwind.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}