DNS Report for tfl.gov.uk

• venus.ns.cloudflare.com

  • IPv4: 173.245.58.235, 172.64.32.235, 108.162.192.235
  • IPv6: 2803:f800:50::6ca2:c0eb, 2a06:98c1:50::ac40:20eb, 2606:4700:50::adf5:3aeb
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• vin.ns.cloudflare.com

  • IPv4: 108.162.193.245, 172.64.33.245, 173.245.59.245
  • IPv6: 2a06:98c1:50::ac40:21f5, 2606:4700:58::adf5:3bf5, 2803:f800:50::6ca2:c1f5
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• venus.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.16.98.104, 104.16.97.104
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• vin.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.16.97.104, 104.16.98.104
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

venus.ns.cloudflare.com

• Serial: 2350773604
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

vin.ns.cloudflare.com

• Serial: 2350773604
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2350773604 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

venus.ns.cloudflare.com

• 5 cluster-b.mailcontrol.com ( 85.115.56.190 )
• 5 cluster-d.mailcontrol.com ( 85.115.60.190 )
• 5 cluster-e.mailcontrol.com ( 85.115.58.190 )
• 5 cluster-g.mailcontrol.com ( 208.87.233.190 )
• 5 cluster-h.mailcontrol.com ( 208.87.234.190 )
• 5 cluster-j.mailcontrol.com ( 85.115.54.190 )

vin.ns.cloudflare.com

• 5 cluster-b.mailcontrol.com ( 85.115.56.190 )
• 5 cluster-d.mailcontrol.com ( 85.115.60.190 )
• 5 cluster-e.mailcontrol.com ( 85.115.58.190 )
• 5 cluster-g.mailcontrol.com ( 208.87.233.190 )
• 5 cluster-h.mailcontrol.com ( 208.87.234.190 )
• 5 cluster-j.mailcontrol.com ( 85.115.54.190 )

MX Record Consistency - OK

MX Record Count - OK

• 190.56.115.85.in-addr.arpa -> cluster-b.mailcontrol.com
• 190.60.115.85.in-addr.arpa -> cluster-d.mailcontrol.com
• 190.54.115.85.in-addr.arpa -> cluster-j.mailcontrol.com
• 190.234.87.208.in-addr.arpa -> cluster-h.mailcontrol.com
• 190.58.115.85.in-addr.arpa -> cluster-e.mailcontrol.com
• 190.233.87.208.in-addr.arpa -> cluster-g.mailcontrol.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 redirect=spf.tfl.gov.uk
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes:
• DNS Lookups: 0
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=none; sp=none; rua=mailto:[email protected]!30m,mailto:[email protected]; ruf=mailto:[email protected]!30m; pct=100; ri=86400
• Syntax: Valid
• Policy: none
• Subdomain Policy: none
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]!30m, mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]!30m
• Reporting Interval: 86400 seconds

DMARC External Validation:

• Valid external domains: dmarc-rua.mailcheck.service.ncsc.gov.uk
• Invalid external domains: csirt.tfl.gov.uk!30m, csirt.tfl.gov.uk!30m

Warnings:

• Some external domains are not properly configured to receive DMARC reports: csirt.tfl.gov.uk!30m, csirt.tfl.gov.uk!30m