DNS Report for mimecast.com

• dns02.mimecast.net

  • IPv4: 205.139.110.125
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• dns03.mimecast.net

  • IPv4: 195.130.217.24
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• dns04.mimecast.net

  • IPv4: 207.211.41.115
  • IPv6: No IPv6 found
  • TTL (IPv4): 13 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• dns01.mimecast.net

  • IPv4: 185.58.87.12
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• dns02.mimecast.net

  • Status: Responded
  • IP(s): 103.107.226.226
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dns03.mimecast.net

  • Status: Responded
  • IP(s): 103.107.226.226
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dns04.mimecast.net

  • Status: Responded
  • IP(s): 103.107.226.226
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dns01.mimecast.net

  • Status: Responded
  • IP(s): 103.107.226.226
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

dns02.mimecast.net

• Serial: 1722686252
• Refresh: 300
• Retry: 300
• Expire: 604800
• Minimum TTL: 86400

dns03.mimecast.net

• Serial: 1722686252
• Refresh: 300
• Retry: 300
• Expire: 604800
• Minimum TTL: 86400

dns04.mimecast.net

• Serial: 1722686252
• Refresh: 300
• Retry: 300
• Expire: 604800
• Minimum TTL: 86400

dns01.mimecast.net

• Serial: 1722686252
• Refresh: 300
• Retry: 300
• Expire: 604800
• Minimum TTL: 86400

Serial: 1722686252 - OK

REFRESH: 300 - OK

RETRY: 300 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 86400 - Note: Outside recommended range (1-3 hours)

dns02.mimecast.net

• 10 service-alpha-inbound-a.mimecast.com ( 195.130.217.231 )
• 10 service-alpha-inbound-b.mimecast.com ( 91.220.42.231 )

dns03.mimecast.net

• 10 service-alpha-inbound-a.mimecast.com ( 91.220.42.231 )
• 10 service-alpha-inbound-b.mimecast.com ( 91.220.42.231 )

dns04.mimecast.net

• 10 service-alpha-inbound-a.mimecast.com ( 91.220.42.231 )
• 10 service-alpha-inbound-b.mimecast.com ( 91.220.42.231 )

dns01.mimecast.net

• 10 service-alpha-inbound-a.mimecast.com ( 195.130.217.231 )
• 10 service-alpha-inbound-b.mimecast.com ( 195.130.217.231 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 231.217.130.195.in-addr.arpa -> service-alpha-inbound-a.mimecast.com
• 231.42.220.91.in-addr.arpa -> service-alpha-inbound-b.mimecast.com
• 231.42.220.91.in-addr.arpa -> service-alpha-inbound-b.mimecast.com
• 231.217.130.195.in-addr.arpa -> service-alpha-inbound-a.mimecast.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 redirect=aojpw1q8._spf._d.mim.ec
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes:
• DNS Lookups: 1
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]; pct=100; fo=1;
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: rep.dmarcanalyzer.com, for.dmarcanalyzer.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.