DNS Report for blm.gov

• diva.ns.cloudflare.com

  • IPv4: 108.162.192.97, 172.64.32.97, 173.245.58.97
  • IPv6: 2606:4700:50::adf5:3a61, 2803:f800:50::6ca2:c061, 2a06:98c1:50::ac40:2061
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• guss.ns.cloudflare.com

  • IPv4: 172.64.33.172, 173.245.59.172, 108.162.193.172
  • IPv6: 2803:f800:50::6ca2:c1ac, 2a06:98c1:50::ac40:21ac, 2606:4700:58::adf5:3bac
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• diva.ns.cloudflare.com

  • Status: Responded
  • IP(s): 204.124.92.179
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• guss.ns.cloudflare.com

  • Status: Responded
  • IP(s): 204.124.92.179
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

diva.ns.cloudflare.com

• Serial: 2351051098
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

guss.ns.cloudflare.com

• Serial: 2351051098
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2351051098 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

diva.ns.cloudflare.com

• 0 blm-gov.mail.protection.outlook.com ( 52.101.8.50 )

guss.ns.cloudflare.com

• 0 blm-gov.mail.protection.outlook.com ( 52.101.9.19 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 50.8.101.52.in-addr.arpa -> mail-dm6pr09cu00202.inbound.protection.outlook.com
• 19.9.101.52.in-addr.arpa -> mail-blapr09cu00103.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.doi.gov include:spf.protection.outlook.com include:_spf.salesforce.com include:spf.dynect.net include:_spf1.blm.gov include:_spf2.blm.gov include:_spf3.blm.gov include:_spf4.blm.gov -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.doi.gov, spf.protection.outlook.com, _spf.salesforce.com, spf.dynect.net, _spf1.blm.gov, _spf2.blm.gov, _spf3.blm.gov, _spf4.blm.gov
• DNS Lookups: 10
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: mail
• Selector 'mail':
  Record: v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqoO5syFukWG/mGwRZqXEJWhA99iHBsg75N0OeMXG3IWnX28cOBumgzqtQE5bHUMCeY0PX9Mn8GiQuQKHZ3iPCJVKYbANOh2HFMRiovWmviPJB8BO1wZ+f82RafRVLPEE3JGagmiJkrhE2RjXvvP0vYlaChYWbuy2SnWSeOhzayQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1;p=reject;rua=mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]

DMARC External Validation:

• Valid external domains: doi.gov, dmarc.cyber.dhs.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.