DNS Report for anl.gov

• t1dns2.anl.gov

  • IPv4: 130.202.101.37
  • IPv6: 2620:0:dc0:180d::37
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• adns2.es.net

  • IPv4: 192.188.22.52
  • IPv6: 2001:400:ffff:ffff:ffff::8052
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• sdns.lbnl.net

  • IPv4: 131.243.5.53
  • IPv6: 2620:83:8000:a:53::a
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• adns1.es.net

  • IPv4: 192.188.22.22
  • IPv6: 2001:400:ffff:ffff:ffff::4444
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• t1dns1.anl.gov

  • IPv4: 130.202.101.6
  • IPv6: 2620:0:dc0:180e::6
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• t1dns2.anl.gov

  • Status: Failed: The DNS response does not contain an answer to the question: anl.gov. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• adns2.es.net

  • Status: Failed: The DNS response does not contain an answer to the question: anl.gov. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• sdns.lbnl.net

  • Status: Failed: The DNS response does not contain an answer to the question: anl.gov. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• adns1.es.net

  • Status: Failed: The DNS response does not contain an answer to the question: anl.gov. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• t1dns1.anl.gov

  • Status: Failed: The DNS response does not contain an answer to the question: anl.gov. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

t1dns2.anl.gov

• Serial: 2024090531
• Refresh: 7200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 7200

adns2.es.net

• Serial: 2024090529
• Refresh: 7200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 7200

sdns.lbnl.net

• Serial: 2024090531
• Refresh: 7200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 7200

adns1.es.net

• Serial: 2024090529
• Refresh: 7200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 7200

t1dns1.anl.gov

• Serial: 2024090531
• Refresh: 7200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 7200

Serial - Warning: Inconsistent across nameservers

REFRESH: 7200 - OK

RETRY: 3600 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 7200 - OK

t1dns2.anl.gov

• 10 mailgateway-bak.anl.gov ( 130.202.101.29 )
• 10 mailgateway.anl.gov ( 130.202.101.28 )

adns2.es.net

• 10 mailgateway-bak.anl.gov ( 130.202.101.29 )
• 10 mailgateway.anl.gov ( 130.202.101.28 )

sdns.lbnl.net

• 10 mailgateway-bak.anl.gov ( 130.202.101.29 )
• 10 mailgateway.anl.gov ( 130.202.101.28 )

adns1.es.net

• 10 mailgateway-bak.anl.gov ( 130.202.101.29 )
• 10 mailgateway.anl.gov ( 130.202.101.28 )

t1dns1.anl.gov

• 10 mailgateway-bak.anl.gov ( 130.202.101.29 )
• 10 mailgateway.anl.gov ( 130.202.101.28 )

MX Record Consistency - OK

MX Record Count - OK

• 28.101.202.130.in-addr.arpa -> mailgateway.anl.gov
• 29.101.202.130.in-addr.arpa -> mailgateway-bak.anl.gov

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:104.47.0.0/17 ip4:130.202.101.16/28 ip4:146.137.81.0/24 ip4:148.105.8.0/21 ip4:149.72.0.0/16 ip4:149.96.192.110 ip4:149.96.192.2 ip4:149.96.193.110 ip4:149.96.193.2 ip4:150.105.185.150 ip4:150.105.217.150 include:spf1.anl.gov ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 104.47.0.0/17, 130.202.101.16/28, 146.137.81.0/24, 148.105.8.0/21, 149.72.0.0/16, 149.96.192.110, 149.96.192.2, 149.96.193.110, 149.96.193.2, 150.105.185.150, 150.105.217.150
• Includes: spf1.anl.gov
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUyM2CstKi+97snwZONmnWcHnT1gqW3I+PmK/FI4ACH/FQPypCm7eys+wNnfvKMrWxn/nd0hjZAhq56G7Lxa2Ml2frI8h5x467B2ZUMk/JkAOji1KdB3qsluFOLCdZXRbflzP140eg4HxXnVMlsJseKRBedrQA/FZF2IMK2rZ3heTPMY62DVIIwNlX9OF05tC
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; fo=1; rua=mailto:[email protected],mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: ag.dmarcian.com, dmarc.cyber.dhs.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.