crim.ca DNS Report

Health Score: 76%

Need help fixing DNS ? Get an expert advise at support forum

Checked: 1 week before

Parent

NS records at parent servers

dns2.crim.ca [ 132.217.10.11 ]
dns1.crim.ca [ 132.217.10.10 ]
ns1.zonerisq.ca [ 162.219.54.2 ]
ns2.zonerisq.ca [ 162.219.55.2 ]
[These were obtained from any.ca-servers.ca.]

Glue at parent nameservers 7/7

SUCCESS Parent nameservers know A records for your domain, Very good !

NS

Mismatched glue 0/7

The glue provided by the root servers does not match glue that provided by your authoritative DNS servers.
(ns1.zonerisq.ca.		86400	IN	A	162.219.54.2) present at Parent, missing at (132.217.10.11, 132.217.10.10)
(ns2.zonerisq.ca.		86400	IN	A	162.219.55.2) present at Parent, missing at (132.217.10.11, 132.217.10.10)

Nameservers A records 0/7

Some servers does not provide A records for nameservers.
missing A record(s) for (ns1.zonerisq.ca,ns2.zonerisq.ca) at nameserver 132.217.10.11
missing A record(s) for (ns2.zonerisq.ca,ns1.zonerisq.ca) at nameserver 132.217.10.10

Nameservers report identical NS records 7/7

SUCCESS The NS records at all your nameservers are identical.

Nameservers respond 0/10

Some nameservers does not respond:
2620:10a:80eb::2
2620:10a:80ec::2

Nameserver name validity 7/7

SUCCESS All of the NS records that your nameservers report are valid (no IPs or partial domain names).

Number of nameservers 5/5

SUCCESS You have 4 nameservers. You must have at least 2 nameservers (RFC2182 section 5 recommends at least 3 nameservers), and preferably no more than 7.

Lame nameservers 7/7

SUCCESS All the nameservers listed at the parent servers answer authoritatively for your domain.

Missing (stealth) nameservers 7/7

SUCCESS All your nameservers are also listed at the parent servers.

Root missing nameservers 7/7

SUCCESS All of the nameservers listed at the parent nameservers are also listed as NS records at your nameservers.

Nameservers on separate class C's 7/7

SUCCESS Nameservers are in a different networks.

public IPs 7/7

SUCCESS All of your NS records appear to use public IPs.

SOA

SOA record

SOA record is:
Hostmaster email
root.crim.ca
Serial
2016071567
Refresh
10800
Retry
900
Expire
604800
TTL
300

Serial agreement 7/7

SUCCESS All your nameservers agree that your SOA serial number is 2016071567 That means that all your nameservers are using the same data.

SOA MNAME 3/3

SUCCESS SOA (Start of Authority) record states that your master (primary) name server is: dns1.crim.ca That server is listed at the parent servers, which is correct.

Serial value 1/1

SUCCESS SOA serial number is: 2016071567 This appears to be in the recommended format of YYYYMMDDnn, where 'nn' is the revision. This number must be incremented every time you make a DNS change.

Refresh value 1/1

SUCCESS SOA Retry interval is : 10800 seconds. This seems OK. (Values about 3600-7200 seconds is good if not using DNS NOTIFY; RFC1912 2.2 recommends a value between 1200 to 43200 seconds (20 minutes to 12 hours)). This value determines how often secondary/slave nameservers check with the master for updates.

Retry value 1/1

SUCCESS SOA Retry interval is : 900 seconds. This seems OK. (Values about 120-7200 seconds is good). The retry value is the amount of time your secondary/slave nameservers will wait to contact the master nameserver again if the last attempt failed.

Expire value 1/1

SUCCESS SOA Expire time is : 604800 seconds. This seems OK. (Values 604800 to 2419200 seconds (1-4 weeks) is good). RFC1912 suggests 2-4 weeks. This is how long a secondary/slave nameserver will wait before considering its DNS data stale if it can't reach the primary nameserver.

TTL value 1/1

SUCCESS SOA Expire time is : 300 seconds. This seems OK. (about 300 to 86400 seconds or 5 min - 24 hours is good). RFC2308 suggests a value of 1-3 hours. This value used to determine the default (technically, minimum) TTL (time-to-live) for DNS entries, but now is used for negative caching.

Info

DNS trace

Trace to crim.ca
lookup crim.ca at A.ROOT-SERVERS.NET(198.41.0.4) 7 ms
A.ROOT-SERVERS.NET(198.41.0.4) refer to c.ca-servers.ca(185.159.196.2)
lookup crim.ca at c.ca-servers.ca(185.159.196.2) 69 ms
c.ca-servers.ca(185.159.196.2) refer to dns1.crim.ca(132.217.10.10)
lookup crim.ca at dns1.crim.ca(132.217.10.10) 12 ms
got A record 'crim.ca IN A 132.217.10.53' from crim.ca(132.217.10.10)
Total time: 88 ms