DNS Report for openrainbow.com

• ns61.constellix.net

  • IPv4: 43.247.171.1
  • IPv6: 2600:180c:6001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns11.constellix.com

  • IPv4: 96.45.80.1
  • IPv6: 2600:180a:1001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns21.constellix.com

  • IPv4: 46.31.236.1
  • IPv6: 2600:180b:2001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns31.constellix.com

  • IPv4: 43.247.170.1
  • IPv6: 2600:180c:3001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns41.constellix.net

  • IPv4: 96.45.81.1
  • IPv6: 2600:180a:4001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns51.constellix.net

  • IPv4: 46.31.237.1
  • IPv6: 2600:180b:5001::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns61.constellix.net

  • Status: Responded
  • IP(s): 135.148.197.14, 135.148.197.15
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns11.constellix.com

  • Status: Responded
  • IP(s): 135.148.197.15, 135.148.197.14
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns21.constellix.com

  • Status: Responded
  • IP(s): 135.148.197.15, 135.148.197.14
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns31.constellix.com

  • Status: Responded
  • IP(s): 135.148.197.15, 135.148.197.14
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns41.constellix.net

  • Status: Responded
  • IP(s): 135.148.197.14, 135.148.197.15
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns51.constellix.net

  • Status: Responded
  • IP(s): 135.148.197.14, 135.148.197.15
  • TTL: 1800 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

ns61.constellix.net

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

ns11.constellix.com

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

ns21.constellix.com

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

ns31.constellix.com

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

ns41.constellix.net

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

ns51.constellix.net

• Serial: 2015010767
• Refresh: 43200
• Retry: 3600
• Expire: 1209600
• Minimum TTL: 180

Serial: 2015010767 - OK

REFRESH: 43200 - OK

RETRY: 3600 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 180 - Note: Outside recommended range (1-3 hours)

ns61.constellix.net

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.217 )

ns11.constellix.com

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.216 )

ns21.constellix.com

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.215 )

ns31.constellix.com

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.216 )

ns41.constellix.net

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.216 )

ns51.constellix.net

• 10 spool.mail.gandi.net ( 217.70.178.1 )
• 50 fb.mail.gandi.net ( 217.70.178.217 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 1.178.70.217.in-addr.arpa -> spool.mail.gandi.net
• 217.178.70.217.in-addr.arpa -> spool8.mail.gandi.net
• 216.178.70.217.in-addr.arpa -> spool7.mail.gandi.net
• 215.178.70.217.in-addr.arpa -> spool6.mail.gandi.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 a mx ip4:54.39.227.85 ip4:51.178.224.244 include:mail.openrainbow.com include:smtp.openrainbow.com include:_mailcust.gandi.net include:mail.zendesk.com include:spf.mailjet.com include:servers.mcsv.net ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 54.39.227.85, 51.178.224.244
• Includes: mail.openrainbow.com, smtp.openrainbow.com, _mailcust.gandi.net, mail.zendesk.com, spf.mailjet.com, servers.mcsv.net
• DNS Lookups: 16 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: mail
• Selector 'mail':
  Record: v=DKIM1; h=sha256; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz44xjE5zBt9ObAJbtnZO5j/D2AW/DbJ8kQo+O97f1wdvtMK3ZqLd8RTer7RgUJVL76SfYtm0zFFQP1FduEnvPSqVgfWJOpB692V5wZqnpKnFioOKc7ifKD/PR70BHn7L7miGLoHgIyRSwKut2cqVTPypmS/GZ8tCGsZHezGr/aIMOQ
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
• Syntax: Valid
• Policy: reject
• Subdomain Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Strict
• SPF Alignment (aspf): Strict

DMARC External Validation:

• Valid external domains: easydmarc.com, rep.easydmarc.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.