DNS Report for absa.africa

• ns3.absa.africa

  • IPv4: 185.42.137.105
  • IPv6: 2a01:3f0:400::54
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns4.absa.africa

  • IPv4: 194.58.196.54
  • IPv6: 2a01:3f1:854::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.absa.africa

  • IPv4: 194.58.198.54
  • IPv6: 2a01:3f1:3054::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns3.absa.africa

  • Status: Responded
  • IP(s): 178.79.178.218
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: SERVFAIL)
  • TCP Connectivity: TCP connection failed (Response code: SERVFAIL)

• ns4.absa.africa

  • Status: Responded
  • IP(s): 178.79.178.218
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: SERVFAIL)
  • TCP Connectivity: TCP connection failed (Response code: SERVFAIL)

• ns2.absa.africa

  • Status: Responded
  • IP(s): 178.79.178.218
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns3.absa.africa

• Serial: 612
• Refresh: 302400
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 600

ns4.absa.africa

• Serial: 612
• Refresh: 302400
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 600

ns2.absa.africa

• Serial: 612
• Refresh: 302400
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 600

Serial: 612 - OK

REFRESH: 302400 - OK

RETRY: 3600 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 600 - Note: Outside recommended range (1-3 hours)

ns3.absa.africa

• 0 absa-africa.mail.protection.outlook.com ( 52.101.73.24 )

ns4.absa.africa

• 0 absa-africa.mail.protection.outlook.com ( 52.101.73.22 )

ns2.absa.africa

• 0 absa-africa.mail.protection.outlook.com ( 52.101.68.39 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 39.68.101.52.in-addr.arpa -> mail-db7pr03cu00607.inbound.protection.outlook.com
• 24.73.101.52.in-addr.arpa -> mail-as8pr05cu00300.inbound.protection.outlook.com
• 22.73.101.52.in-addr.arpa -> mail-am7pr05cu00106.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:169.202.0.0/16 ip4:168.210.41.10/31 include:spf.protection.outlook.com include:email.insidedata.co.za include:spf-c.za.striata.com include:_spf.doximapps.com include:cust-spf.exacttarget.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 169.202.0.0/16, 168.210.41.10/31
• Includes: spf.protection.outlook.com, email.insidedata.co.za, spf-c.za.striata.com, _spf.doximapps.com, cust-spf.exacttarget.com
• DNS Lookups: 16 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkoGgYZyf8sWCY8q8xcFJRxHO4zbtp/lchIHblRLWEuSIEm+BNvIWtV+/rrljC6e9Fwj5trKj9aLH9eqp5ALYukDobKjgTe02Fa6eRu+YA5VYXXTqjf7wVaLF8MLePxmgDYAjElkDowVzwbR52dsGnhDS3HDm2XBvYnvkbruiyfQIDAQAB;
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; adkim=r; aspf=r; fo=1; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=reject
• Syntax: Valid
• Policy: reject
• Subdomain Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.