DNS Report for watchguard.com

• ns1.dnsimple.com

  • IPv4: 162.159.24.4
  • IPv6: 2400:cb00:2049:1::a29f:1804
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.dnsimple.com

  • IPv4: 199.247.153.53
  • IPv6: 2620:111:8005::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns3.dnsimple.com

  • IPv4: 162.159.26.4
  • IPv6: 2400:cb00:2049:1::a29f:1a04
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns4.dnsimple.com

  • IPv4: 199.247.155.53
  • IPv6: 2620:111:8007::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1.dnsimple.com

  • Status: Responded
  • IP(s): 54.212.248.139
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2.dnsimple.com

  • Status: Responded
  • IP(s): 54.212.248.139
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns3.dnsimple.com

  • Status: Responded
  • IP(s): 54.212.248.139
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns4.dnsimple.com

  • Status: Responded
  • IP(s): 54.212.248.139
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns1.dnsimple.com

• Serial: 1522866298
• Refresh: 86400
• Retry: 7200
• Expire: 604800
• Minimum TTL: 300

ns2.dnsimple.com

• Serial: 1522866298
• Refresh: 86400
• Retry: 7200
• Expire: 604800
• Minimum TTL: 300

ns3.dnsimple.com

• Serial: 1522866298
• Refresh: 86400
• Retry: 7200
• Expire: 604800
• Minimum TTL: 300

ns4.dnsimple.com

• Serial: 1522866298
• Refresh: 86400
• Retry: 7200
• Expire: 604800
• Minimum TTL: 300

Serial: 1522866298 - OK

REFRESH: 86400 - OK

RETRY: 7200 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns1.dnsimple.com

• 10 mx-cluster-usa01.hornetsecurity.com ( 173.45.18.100 )
• 20 mx-cluster-usa02.hornetsecurity.com ( 173.45.18.100 )
• 30 mx-cluster-usa03.hornetsecurity.com ( 173.45.18.100 )
• 40 mx-cluster-usa04.hornetsecurity.com ( 173.45.18.100 )

ns2.dnsimple.com

• 10 mx-cluster-usa01.hornetsecurity.com ( 173.45.18.100 )
• 20 mx-cluster-usa02.hornetsecurity.com ( 173.45.18.100 )
• 30 mx-cluster-usa03.hornetsecurity.com ( 173.45.18.100 )
• 40 mx-cluster-usa04.hornetsecurity.com ( 173.45.18.100 )

ns3.dnsimple.com

• 10 mx-cluster-usa01.hornetsecurity.com ( 173.45.18.100 )
• 20 mx-cluster-usa02.hornetsecurity.com ( 173.45.18.100 )
• 30 mx-cluster-usa03.hornetsecurity.com ( 173.45.18.100 )
• 40 mx-cluster-usa04.hornetsecurity.com ( 173.45.18.100 )

ns4.dnsimple.com

• 10 mx-cluster-usa01.hornetsecurity.com ( 173.45.18.100 )
• 20 mx-cluster-usa02.hornetsecurity.com ( 173.45.18.100 )
• 30 mx-cluster-usa03.hornetsecurity.com ( 173.45.18.100 )
• 40 mx-cluster-usa04.hornetsecurity.com ( 173.45.18.100 )

MX Record Consistency - OK

MX Record Count - OK

• 100.18.45.173.in-addr.arpa -> hsmx01-hz5.hornetsecurity.com
• 100.18.45.173.in-addr.arpa -> hsmx01-hz5.hornetsecurity.com
• 100.18.45.173.in-addr.arpa -> hsmx01-hz5.hornetsecurity.com
• 100.18.45.173.in-addr.arpa -> hsmx01-hz5.hornetsecurity.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:watchguard_com._es.easydmarc.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: watchguard_com._es.easydmarc.com
• DNS Lookups: 6
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYeB4/Jq5eOc0rLybalmrYMitjH+M782pjmGgTZh9CjyLZhtNfNmESCiil71OyVz3NXoEcTkQMjWQ2vbI6GfQttngou2DsAJ5bf1AYCbDsweVjWSXfaZvzLai6G5fe4GlpphLtN0EEOqWjtH4bK60WqOGkQc7+hObD9u+JNDiU2wIDAQAB; n=1024,1449995314,1
• Valid Syntax: Yes

• Record: v=DMARC1;p=reject;rua=mailto:[email protected],mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected],mailto:[email protected];fo=1
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: rua.easydmarc.us, smtpeter.com, ruf.easydmarc.us
• All external domains in your DMARC record are giving permission to send them DMARC reports.