DNS Report for eff.org

• ns2.eff.org

  • IPv4: 138.68.29.57
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns1.eff.org

  • IPv4: 173.239.79.201
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns4.eff.org

  • IPv4: 173.239.79.197
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns2.eff.org

  • Status: Responded
  • IP(s): 173.239.79.196
  • TTL: 7200 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed: [Errno 111] Connection refused

• ns1.eff.org

  • Status: Responded
  • IP(s): 173.239.79.196
  • TTL: 7200 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns4.eff.org

  • Status: Responded
  • IP(s): 173.239.79.196
  • TTL: 7200 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns2.eff.org

• Serial: 2024082304
• Refresh: 600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

ns1.eff.org

• Serial: 2024082304
• Refresh: 600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

ns4.eff.org

• Serial: 2024082304
• Refresh: 600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

Serial: 2024082304 - OK

REFRESH: 600 - OK

RETRY: 1800 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

ns2.eff.org

• 0 eff-org.mail.protection.outlook.com ( 52.101.42.18 )
• 10 mail2.eff.org ( 173.239.79.204 )

ns1.eff.org

• 0 eff-org.mail.protection.outlook.com ( 52.101.8.46 )
• 10 mail2.eff.org ( 173.239.79.204 )

ns4.eff.org

• 0 eff-org.mail.protection.outlook.com ( 52.101.8.36 )
• 10 mail2.eff.org ( 173.239.79.204 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 46.8.101.52.in-addr.arpa -> mail-dm6pr05cu00406.inbound.protection.outlook.com
• 18.42.101.52.in-addr.arpa -> mail-co1pr03cu00302.inbound.protection.outlook.com
• 36.8.101.52.in-addr.arpa -> No PTR record found: The DNS query name does not exist: 36.8.101.52.in-addr.arpa.
• 204.79.239.173.in-addr.arpa -> mail2.eff.org

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 mx ip4:173.239.79.202 include:spf1.eff.org include:spf2.eff.org include:spf.protection.outlook.com include:salsalabs.org -all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 173.239.79.202
• Includes: spf1.eff.org, spf2.eff.org, spf.protection.outlook.com, salsalabs.org
• DNS Lookups: 9
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtttWazSyHy//AD8mA/ufw1JtA1rMv9+makXNyubUq8tq8gZVgWAdFJPiEVHllHxrgP1WGrh5oby0KmlokqQCbr6z56Pj9gvGdJ9t3I1f6Lb8eHLVXGXFFArFnbXIQgTDmba1JlYpVOdZpw7EIT1xKwQgyHCcZGwJXxnzpX8Pa7pW+/uOvl946DzcPzifyWZ7r
• Valid Syntax: Yes

• Record: v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected];
• Syntax: Valid
• Policy: none
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.