Zonemaster

Test your DNS server today.

Option - check domain with : 

Test your DNS server today.

Input zone.tld

Nameservers (up to 30)

Digests

Option - check domain with : 

What is pre-delegated domain check?

An pre-delegated domain test is a test performed on a domain that can (but need not) be fully published in DNS.

This can be very useful if you are considering moving your domain from one registrar to another. Let us take, for example, the domain example.se being moved from the name server ‘ns.nic.se’ to the name server ‘ns.iis.se’.

In this case, you could run an undelegated domain test on the domain (example.se) with the name server you are moving to (ns.iis.se) BEFORE you go through with the move.

When the test shows green, you can be fairly certain that your domain’s new home is able to answer questions about your domain. However, there may still be errors in the zone data that this test does not know.

xn--vxer-loa.stockholm (växer.stockholm)

Contains warnings!

2021-10-09 15:47:34

  • Checked with: IPv4 and IPv6

Link to this result is:
zonemaster.iis.se/?resultid=e11eaf81dd0102a2  |  Copy

Zonemaster lights
SYSTEMBASICADDRESSCONNECTIVITY2CONSISTENCYDELEGATIONDNSSEC2NAMESERVERSYNTAXZONEBack to top
SYSTEM
Using version v4.2.3 of the Zonemaster engine.   OK
BASIC
Parent domain 'stockholm' was found for the tested domain.   OK
Nameserver ns03.stockholm.se/217.21.224.88 listed these servers as glue: ns03.stockholm.se., ns04.stockholm.se..   OK
Nameserver ns03.stockholm.se/2a03:c780:ffff:d0::11 listed these servers as glue: ns03.stockholm.se., ns04.stockholm.se..   OK
Nameserver ns04.stockholm.se/217.21.224.89 listed these servers as glue: ns03.stockholm.se., ns04.stockholm.se..   OK
Nameserver ns04.stockholm.se/2a03:c780:ffff:d1::11 listed these servers as glue: ns03.stockholm.se., ns04.stockholm.se..   OK
Functional nameserver found. "A" query for www.xn--vxer-loa.stockholm test skipped.   OK
ADDRESS
All Nameserver addresses are in the routable public addressing space.   OK
Reverse DNS entry exists for each Nameserver IP address.   OK
Every reverse DNS entry matches name server name.   OK
CONNECTIVITY
All authoritative nameservers have the IPv4 addresses in the same AS (29672).   Warning!
All authoritative nameservers have the IPv6 addresses in the same AS (29672).   Warning!
CONSISTENCY
Saw SOA serial number 2018051619 on following nameserver set : ns03.stockholm.se/217.21.224.88; ns03.stockholm.se/2a03:c780:ffff:d0::11; ns04.stockholm.se/217.21.224.89; ns04.stockholm.se/2a03:c780:ffff:d1::11.   OK
A single SOA serial number was found (2018051619).   OK
A single SOA rname value was found (hostmaster.stockholm.se.).   OK
A single SOA time parameter set was seen (REFRESH=14400, RETRY=3600, EXPIRE=604800, MINIMUM=900).   OK
A single NS set was found (ns03.stockholm.se.; ns04.stockholm.se.).   OK
Glue records are consistent between glue and authoritative data.   OK
A single SOA mname value was seen (ns03.stockholm.se.).   OK
DELEGATION
Parent lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se). Lower limit set to 2.   OK
Child lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se). Lower limit set to 2.   OK
Child lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se) that resolve to IPv4 addresses (217.21.224.88; 217.21.224.89). Lower limit set to 2.   OK
Child lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se) that resolve to IPv6 addresses (2a03:c780:ffff:d0::11; 2a03:c780:ffff:d1::11). Lower limit set to 2.   OK
Delegation lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se) that resolve to IPv4 addresses (217.21.224.88; 217.21.224.89). Lower limit set to 2.   OK
Delegation lists enough (2) nameservers (ns03.stockholm.se; ns04.stockholm.se) that resolve to IPv6 addresses (2a03:c780:ffff:d0::11; 2a03:c780:ffff:d1::11). Lower limit set to 2.   OK
All the IP addresses used by the nameservers in parent are unique.   OK
All the IP addresses used by the nameservers in child are unique.   OK
All the IP addresses used by the nameservers are unique.   OK
The smallest possible legal referral packet is smaller than 513 octets (it is 321).   OK
All these nameservers are confirmed to be authoritative : ns03.stockholm.se; ns04.stockholm.se.   OK
No nameserver points to CNAME alias.   OK
All the nameservers have SOA record.   OK
All of the nameserver names are listed both at parent and child.   OK
DNSSEC
There are neither DS nor DNSKEY records for the zone.   OK
The zone is not signed with DNSSEC.   OK
NAMESERVER
Nameserver ns03.stockholm.se/2a03:c780:ffff:d0::11 is not a recursor.   OK
Nameserver ns04.stockholm.se/2a03:c780:ffff:d1::11 is not a recursor.   OK
Nameserver ns04.stockholm.se/217.21.224.89 is not a recursor.   OK
Nameserver ns03.stockholm.se/217.21.224.88 is not a recursor.   OK
The following nameservers support EDNS0 : ns03.stockholm.se/217.21.224.88; ns04.stockholm.se/217.21.224.89; ns03.stockholm.se/2a03:c780:ffff:d0::11; ns04.stockholm.se/2a03:c780:ffff:d1::11.   OK
AXFR not available on nameserver ns03.stockholm.se/217.21.224.88.   OK
AXFR not available on nameserver ns03.stockholm.se/2a03:c780:ffff:d0::11.   OK
AXFR not available on nameserver ns04.stockholm.se/217.21.224.89.   OK
AXFR not available on nameserver ns04.stockholm.se/2a03:c780:ffff:d1::11.   OK
All nameservers reply with same IP used to query them.   OK
All nameservers succeeded to resolve to an IP address.   OK
None of the following nameservers returns an upward referral : ns03.stockholm.se; ns04.stockholm.se.   OK
Nameserver ns03.stockholm.se/217.21.224.88 preserves original case of queried names (Www.xN--vxER-lOa.StockholM).   OK
Nameserver ns03.stockholm.se/2a03:c780:ffff:d0::11 preserves original case of queried names (Www.xN--vxER-lOa.StockholM).   OK
Nameserver ns04.stockholm.se/217.21.224.89 preserves original case of queried names (Www.xN--vxER-lOa.StockholM).   OK
Nameserver ns04.stockholm.se/2a03:c780:ffff:d1::11 preserves original case of queried names (Www.xN--vxER-lOa.StockholM).   OK
When asked for SOA records on "www.xn--vxer-loa.stockholm" with different cases, all servers reply consistently.   OK
SYNTAX
No illegal characters in the domain name (xn--vxer-loa.stockholm).   OK
Neither end of any label in the domain name (xn--vxer-loa.stockholm) has a hyphen.   OK
Domain name (xn--vxer-loa.stockholm) has no label with a double hyphen ('--') in position 3 and 4 (with a prefix which is not 'xn--').   OK
Nameserver (ns03.stockholm.se) syntax is valid.   OK
Nameserver (ns04.stockholm.se) syntax is valid.   OK
There is no misused '@' character in the SOA RNAME field (hostmaster.stockholm.se.).   OK
The SOA RNAME field (hostmaster@stockholm.se) is compliant with RFC2822.   OK
SOA MNAME (ns03.stockholm.se) syntax is valid.   OK
ZONE
SOA 'mname' nameserver (ns03.stockholm.se) is authoritative for 'xn--vxer-loa.stockholm' zone.   OK
SOA 'refresh' value (14400) is higher than the minimum recommended value (14400).   OK
SOA 'refresh' value (14400) is higher than the SOA 'retry' value (3600).   OK
SOA 'retry' value (3600) is more than the minimum recommended value (3600).   OK
SOA 'expire' value (604800) is higher than the minimum recommended value (604800) and not lower than the 'refresh' value (14400).   OK
SOA 'minimum' value (900) is between the recommended ones (300/86400).   OK
SOA 'mname' value (ns03.stockholm.se) refers to a NS which is not an alias (CNAME).   OK
SOA 'mname' value (ns03.stockholm.se) refers to a NS which is not an alias (CNAME).   OK
MX with mail target ({mailtarget_list}) exists for the domain name.   OK
A unique SOA record is returned by all nameservers of the zone.   OK
Creation time Overall result
2021-10-09 15:47:34 ( This is current test.)   Contains warnings!
Using version v4.2.3 of the Zonemaster engine.

About Zonemaster

Give your domain a complete physical! Zonemaster helps you to control how your website is doing. As a bonus, you also get a better understanding of how the domain name system, DNS, works.

When a domain (also called zone) is sent to Zonemaster, the program investigates the state of the domain from beginning to end. This is done through Zonemaster examining DNS from the root (.) to the TLD (top-level domain, for example, .se), and then finally through the DNS servers that contain information about the specified domain (for example, zonemaster.se).

Zonemaster is also able to perform many other tests, for example, checking the DNSSEC signatures, that different hosts can be accessed and that the IP addresses are valid. This is all to make sure that your domain runs as good as possible.

About the domain name system, DNS

Most people who use the internet have never reflected over what actually happens when one types an address in their web browser and then clicks the enter button.

To simplify, the domain name system, (DNS) is a database that associates domain names to IP addresses, the same way a phone book associates names to phone numbers.

An IP address is a unique series of numbers that identifies every computer that is connected to the internet. It’s similar to the way every telephone has its own number in the telephone network.

A long series of numbers works fine for computers, but it’s difficult for people to memorize. Therefore, DNS has been developed – an extra system for us when we want to reach a web server on a specific site or an email server we want to send an email to.

Zonemaster all lights

Internetstiftelsen verkar för ett internet som bidrar positivt till människan och samhället. Vi är en oberoende organisation som säkerställer en stark och säker infrastruktur för internet i Sverige. Vårt mål är att alla ska våga och kunna använda internet. Vi finns i Sverige och ansvarar för den svenska toppdomänen .se och driften av toppdomänen .nu.

  • Internetstiftelsen
  • Hammarby Kaj 10D
  • Box 92073
  • 120 07 Stockholm
Certifierade enligt ISO/IEC
27001:2013
Svenskarna och internet
Internetdagarna
Internetstiftelsen
Bredbandskollen
Internetmuseum
Digitala lektioner