DNS Report for usda.gov

• ns1.usda.gov

  • IPv4: 199.141.126.202
  • IPv6: 2600:12f0:0:ac04::202
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.usda.gov

  • IPv4: 199.141.126.206
  • IPv6: 2600:12f0:0:ac04::206
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1.usda.gov

  • Status: Responded
  • IP(s): 199.134.75.32
  • TTL: 86400 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2.usda.gov

  • Status: Responded
  • IP(s): 199.134.75.32
  • TTL: 86400 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns1.usda.gov

• Serial: 2010492793
• Refresh: 90000
• Retry: 9000
• Expire: 90000
• Minimum TTL: 900

ns2.usda.gov

• Serial: 2010492793
• Refresh: 90000
• Retry: 9000
• Expire: 90000
• Minimum TTL: 900

Serial: 2010492793 - OK

REFRESH: 90000 - OK

RETRY: 9000 - OK

EXPIRE: 90000 - OK

MINIMUM TTL: 900 - Note: Outside recommended range (1-3 hours)

ns1.usda.gov

• 10 newsbox-usda-gov.mail.protection.outlook.com ( 52.101.8.52 )
• 10 usda-gov.mail.protection.outlook.com ( 52.101.11.12 )

ns2.usda.gov

• 10 newsbox-usda-gov.mail.protection.outlook.com ( 52.101.8.52 )
• 10 usda-gov.mail.protection.outlook.com ( 52.101.8.52 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 52.8.101.52.in-addr.arpa -> mail-ds0pr09cu00104.inbound.protection.outlook.com
• 12.11.101.52.in-addr.arpa -> mail-sa9pr09cu00104.inbound.protection.outlook.com
• 52.8.101.52.in-addr.arpa -> mail-ds0pr09cu00104.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:52.222.69.242 include:mailproxy1.usda.gov include:mailproxy2.usda.gov ip4:134.177.248.0/28 ip4:216.128.251.155
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 52.222.69.242, 134.177.248.0/28, 216.128.251.155
• Includes: mailproxy1.usda.gov, mailproxy2.usda.gov
• DNS Lookups: 6
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzfYFBOunKQ0xnB2BlUaJ7/rRf2MkW5EXgbdNqLFkMckl6m2GZvymKz5mCrAQ56uc7HEZJrX6m2T/9PJlsyMJAmSNuQQ+PryWKezXPcyNDYgspy9E+EnR8v+fWCsfnJHRxxezk0Bp1x0BK4DsE+enhAtKykxrg4n8qCT7VKPjscurL5RVkcVdxZoWtYoiVDg6
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; fo=1;
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: dmarc.cyber.dhs.gov, emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.