NS · SOA · MX · GLUE
DNS report
Enter a domain to test its DNS setup the way intoDNS does: every name server is asked directly, and each check is marked as passed, warning or error.
What does the DNS report test?
- Parent: whether the extension's servers delegate the domain, which name servers they list, and whether glue records are present and correct.
- Name servers: that every one answers, authoritatively, over UDP and TCP, without open recursion, with the same NS records, spread across networks.
- SOA: the primary server, matching serials on every name server and refresh, retry, expire and minimum TTL values against the recommended ranges.
- Mail and web: MX records (valid names, no CNAME or IP, addresses, reverse DNS) and whether www resolves to a public address.
Frequently asked questions
›What is a lame delegation?
A name server that is listed for the domain but does not answer authoritatively for it. Resolvers that pick that server get errors or wrong data.
›Why do the SOA serials need to match?
The serial is the zone's version number. Different serials mean some name servers did not receive the latest changes, so visitors may see old records.
›Are warnings always a problem?
No. Some warnings, like all name servers being in one network, are normal for large DNS providers. Errors (red) should be fixed.
›Is the result cached?
No. Every report asks the name servers live at that moment.