DNS Report for va.gov

• ns4x.va.gov

  • IPv4: 152.133.16.7
  • IPv6: 2600:8030:0:5::151
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns1x.va.gov

  • IPv4: 152.130.16.7
  • IPv6: 2600:8000:0:5::151
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2x.va.gov

  • IPv4: 152.131.16.7
  • IPv6: 2600:8010:0:5::151
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns3x.va.gov

  • IPv4: 152.132.16.7
  • IPv6: 2600:8020:0:5::151
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns4x.va.gov

  • Status: Responded
  • IP(s): 152.131.96.221
  • TTL: 30 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns1x.va.gov

  • Status: Responded
  • IP(s): 152.131.96.221
  • TTL: 30 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2x.va.gov

  • Status: Responded
  • IP(s): 152.130.96.221
  • TTL: 30 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns3x.va.gov

  • Status: Responded
  • IP(s): 152.133.106.221
  • TTL: 30 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns4x.va.gov

• Serial: 2024088679
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 7200

ns1x.va.gov

• Serial: 2024088679
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 7200

ns2x.va.gov

• Serial: 2024088679
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 7200

ns3x.va.gov

• Serial: 2024088679
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 7200

Serial: 2024088679 - OK

REFRESH: 86400 - OK

RETRY: 7200 - OK

EXPIRE: 3600000 - OK

MINIMUM TTL: 7200 - OK

ns4x.va.gov

• 10 mx20.va.gov ( 152.130.26.44 )

ns1x.va.gov

• 10 mx20.va.gov ( 152.133.26.44 )

ns2x.va.gov

• 10 mx20.va.gov ( 152.131.26.44 )

ns3x.va.gov

• 10 mx20.va.gov ( 152.132.26.44 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 44.26.132.152.in-addr.arpa -> mx20.va.gov
• 44.26.131.152.in-addr.arpa -> mx20.va.gov
• 44.26.133.152.in-addr.arpa -> mx20.va.gov
• 44.26.130.152.in-addr.arpa -> mx20.va.gov

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 mx ip4:152.130.26.32/27 ip4:152.131.26.32/27 ip4:152.132.26.32/27 ip4:152.133.26.32/27 ip4:152.129.0.0/16 ip6:2600:8000:0:10::0/112 ip6:2600:8010:0:10::0/112 ip6:2600:8020:0:10::0/112 ip6:2600:8030:0:10::0/112 -all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 152.130.26.32/27, 152.131.26.32/27, 152.132.26.32/27, 152.133.26.32/27, 152.129.0.0/16, 2600:8000:0:10::0/112, 2600:8010:0:10::0/112, 2600:8020:0:10::0/112, 2600:8030:0:10::0/112
• Includes:
• DNS Lookups: 2
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• Failure Options (fo): 1
• Reporting Interval: 3600 seconds

DMARC External Validation:

• Valid external domains: dmarc.cyber.dhs.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.