DNS Report for cuni.cz

• nsa.ces.net

  • IPv4: 195.113.144.205
  • IPv6: 2001:718:1:1::144:205
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• cuce.ruk.cuni.cz

  • IPv4: 195.113.0.8
  • IPv6: 2001:718:1e03:1::8
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• david.ruk.cuni.cz

  • IPv4: 78.128.213.242
  • IPv6: 2001:718:1203:502::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• golias.ruk.cuni.cz

  • IPv4: 195.113.0.2
  • IPv6: 2001:718:1e03:1::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• nsa.ces.net

  • Status: Responded
  • IP(s): 195.113.89.35
  • TTL: 86400 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• cuce.ruk.cuni.cz

  • Status: Responded
  • IP(s): 195.113.89.35
  • TTL: 86400 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• david.ruk.cuni.cz

  • Status: Responded
  • IP(s): 195.113.89.35
  • TTL: 86400 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• golias.ruk.cuni.cz

  • Status: Responded
  • IP(s): 195.113.89.35
  • TTL: 86400 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

nsa.ces.net

• Serial: 2024091268
• Refresh: 28800
• Retry: 7200
• Expire: 1209600
• Minimum TTL: 86400

cuce.ruk.cuni.cz

• Serial: 2024091268
• Refresh: 28800
• Retry: 7200
• Expire: 1209600
• Minimum TTL: 86400

david.ruk.cuni.cz

• Serial: 2024091268
• Refresh: 28800
• Retry: 7200
• Expire: 1209600
• Minimum TTL: 86400

golias.ruk.cuni.cz

• Serial: 2024091268
• Refresh: 28800
• Retry: 7200
• Expire: 1209600
• Minimum TTL: 86400

Serial: 2024091268 - OK

REFRESH: 28800 - OK

RETRY: 7200 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 86400 - Note: Outside recommended range (1-3 hours)

nsa.ces.net

• 20 mx.cesnet.cz ( 195.113.161.46 )
• 30 mx2.cesnet.cz ( 195.113.144.198 )

cuce.ruk.cuni.cz

• 20 mx.cesnet.cz ( 195.113.161.46 )
• 30 mx2.cesnet.cz ( 195.113.144.198 )

david.ruk.cuni.cz

• 20 mx.cesnet.cz ( 195.113.161.46 )
• 30 mx2.cesnet.cz ( 195.113.144.198 )

golias.ruk.cuni.cz

• 20 mx.cesnet.cz ( 195.113.161.46 )
• 30 mx2.cesnet.cz ( 195.113.144.198 )

MX Record Consistency - OK

MX Record Count - OK

• 46.161.113.195.in-addr.arpa -> mx.cesnet.cz
• 198.144.113.195.in-addr.arpa -> mx2.cesnet.cz

PTR Records - OK

• Signed: Yes
• Validation: Failed
• DNSKEY Records: 1
• DS Records in parent zone: 0
• DS at Parent: None

DNSSEC - Warning: Validation failed

Issue: No DS record found at the parent zone.

Action: Please add the DS record to both your DNS server and domain registrar.

Error: Error checking DNSSEC: Your connection limit exceeded. Please slow down and try again later.

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip6:2001:718:1e03:4::16 a:out.ruk.cuni.cz a:dec59.ruk.cuni.cz a:golias.ruk.cuni.cz a:igraine.lfhk.cuni.cz a:dec52.lf1.cuni.cz a:office2.cesnet.cz mx:is.cuni.cz include:spf.protection.outlook.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 2001:718:1e03:4::16
• Includes: spf.protection.outlook.com
• DNS Lookups: 11 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJU6KmjmV9+L1QfyrPwf44qeCCH+Kkml9dddLC+PeeUqXJ59eur4UqM1Jx/BqHcZhJhoTkUHKDxQmx8misjKzu62W4Xvb9oJEwpKp4wXuNQ6D3o7y72rHEsGgnbvccmoiIlkqHqa3ePJ8lKUEOgnl7viAdmcLEASkZx5nJ1ui3xwIDAQAB; n=1024,1451071895,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; sp=none; rua=mailto:[email protected]
• Syntax: Valid
• Policy: quarantine
• Subdomain Policy: none
• RUA (Aggregate Reports): mailto:[email protected]

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.