DNS Report for radb.net

• dns1.merit.net

  • IPv4: 198.108.1.43
  • IPv6: 2001:48a8:6880:1::43
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns2.merit.net

  • IPv4: 198.108.130.10
  • IPv6: 2001:48a8:6880:130::10
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns3.merit.net

  • IPv4: 198.109.36.10
  • IPv6: 2001:48a8:6880:72::10
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns1.wiscnet.net

  • IPv4: 205.213.108.53
  • IPv6: 2001:4e0:1:108::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.wiscnet.net

  • IPv4: 205.213.163.53
  • IPv6: 2001:4e0:1:163::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• dns1.merit.net

  • Status: Responded
  • IP(s): 207.75.116.14
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dns2.merit.net

  • Status: Responded
  • IP(s): 207.75.116.14
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dns3.merit.net

  • Status: Responded
  • IP(s): 207.75.116.14
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns1.wiscnet.net

  • Status: Responded
  • IP(s): 207.75.116.14
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns2.wiscnet.net

  • Status: Responded
  • IP(s): 207.75.116.14
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

dns1.merit.net

• Serial: 2024032600
• Refresh: 28800
• Retry: 14400
• Expire: 2419200
• Minimum TTL: 14400

dns2.merit.net

• Serial: 2024032600
• Refresh: 28800
• Retry: 14400
• Expire: 2419200
• Minimum TTL: 14400

dns3.merit.net

• Serial: 2024032600
• Refresh: 28800
• Retry: 14400
• Expire: 2419200
• Minimum TTL: 14400

ns1.wiscnet.net

• Serial: 2024032600
• Refresh: 28800
• Retry: 14400
• Expire: 2419200
• Minimum TTL: 14400

ns2.wiscnet.net

• Serial: 2024032600
• Refresh: 28800
• Retry: 14400
• Expire: 2419200
• Minimum TTL: 14400

Serial: 2024032600 - OK

REFRESH: 28800 - OK

RETRY: 14400 - OK

EXPIRE: 2419200 - OK

MINIMUM TTL: 14400 - Note: Outside recommended range (1-3 hours)

dns1.merit.net

• 10 mx01.radb.net ( 207.75.116.4 )

dns2.merit.net

• 10 mx01.radb.net ( 207.75.116.4 )

dns3.merit.net

• 10 mx01.radb.net ( 207.75.116.4 )

ns1.wiscnet.net

• 10 mx01.radb.net ( 207.75.116.4 )

ns2.wiscnet.net

• 10 mx01.radb.net ( 207.75.116.4 )

MX Record Consistency - OK

MX Record Count - Warning: Only one MX record

• 4.116.75.207.in-addr.arpa -> mx01.radb.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:paypal.com ip4:129.250.120.86/32 ip6:2001:48a8:6880::/48 ip6:2001:418:1401:e3::/64 ip4:207.75.116.0/23 ip4:198.108.0.0/22 ip4:198.108.60.0/22 ip4:198.108.95.0/24 -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 129.250.120.86/32, 2001:48a8:6880::/48, 2001:418:1401:e3::/64, 207.75.116.0/23, 198.108.0.0/22, 198.108.60.0/22, 198.108.95.0/24
• Includes: paypal.com
• DNS Lookups: 5
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: mail
• Selector 'mail':
  Record: v=DKIM1; k=rsa;
• Valid Syntax: No

Warnings:

• DKIM record for selector 'mail' may be incomplete

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: merit.edu
• All external domains in your DMARC record are giving permission to send them DMARC reports.