DNS Report for nc.gov

• ns1.nc.gov

  • IPv4: 149.168.11.11
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns2.nc.gov

  • IPv4: 149.168.138.11
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1.nc.gov

  • Status: Responded
  • IP(s): 52.204.9.77
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2.nc.gov

  • Status: Responded
  • IP(s): 52.204.9.77
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns1.nc.gov

• Serial: 2011056502
• Refresh: 10800
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 900

ns2.nc.gov

• Serial: 2011056502
• Refresh: 10800
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 900

Serial: 2011056502 - OK

REFRESH: 10800 - OK

RETRY: 3600 - OK

EXPIRE: 2419200 - OK

MINIMUM TTL: 900 - Note: Outside recommended range (1-3 hours)

ns1.nc.gov

• 0 nc-gov.mail.protection.outlook.com ( 52.101.11.12 )

ns2.nc.gov

• 0 nc-gov.mail.protection.outlook.com ( 52.101.8.50 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 12.11.101.52.in-addr.arpa -> mail-sa9pr09cu00104.inbound.protection.outlook.com
• 50.8.101.52.in-addr.arpa -> mail-dm6pr09cu00202.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:204.211.0.0/16 ip4:207.4.0.0/16 ip4:149.168.0.0/16 ip4:152.34.0.0/16 ip4:199.90.0.0/16 ip4:207.192.0.0/18 ip4:10.0.6.50 ip4:10.0.5.104 ip4:10.0.4.102 ip4:10.0.5.222 ip4:63.240.119.111 ip4:63.240.119.115 ip4:199.255.192.0/22
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 204.211.0.0/16, 207.4.0.0/16, 149.168.0.0/16, 152.34.0.0/16, 199.90.0.0/16, 207.192.0.0/18, 10.0.6.50, 10.0.5.104, 10.0.4.102, 10.0.5.222, 63.240.119.111, 63.240.119.115, 199.255.192.0/22
• Includes:
• DNS Lookups: 0
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXRcFncbPntopSW+1ajvSxskQqBVvugbHbrfXcB52Q4i0m0K/exQ+QDFAdySNpTtb9LDSmxnQVw61gxGNvbQT8f4U9suzgVKQweTRAJknRnVdMbC+uOO2RNd+LgMxX7yv+3n73O8OdLVJ+seo5zr/aySwNGWJyR0HeoFHaUCRlMwIDAQAB; n=1024,1456439308,1
• Valid Syntax: Yes

• Record: v=DMARC1;
• Syntax: Valid
• Policy: None
• RUA (Aggregate Reports):

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.

Warnings:

• Invalid policy: None