net.dns
Check your nameserver configuration
Get and check your DNS records.
To resolve your domain name, IANA controlled nameservers are used. In case of political intervention, a fail-over to ORSN is implemented, but currently not in use. You'll find a notice in this section when a fallback occurs ;)
Transaction ID / Source Port randomness
2008-07-08 See
Dan Kaminsky's Website to check if your nameservers are vulnerable to this "
recent"
design flaw.
Clez.net won't provide a specific check for this issue for some time - I'm migrating the systems this month and don't want to add extra complexity like an autoritative master nameserver, catching your request (technically similar to the TCP information in web.agent) and analyzing source ports and transaction tokens.
But the version information in the #overview tab can give you some clue. As you probably know, BIND 8 will stay unpatched for some time, so answering to chaos:version.bind requests with an unpatched version number (< 9.5.0 | < 9.4.2 | < 9.3.5) will now be reported as an error.
Service resource records
2008-07-14 This check now includes probes for the most common SRV records, like
_jabber._tcp,
_xmpp-server._tcp,
_sip._udp and
_ldap._tcp. Additionally, presence of
_http._tcp,
_smtp._tcp and
_jabber (without the ._tcp pseudo-subdomain) will throw a warning. SRV relations have an orange color in the graph.
All Time-To-Live values on this tab show the remaining TTL for clez.net until we rerequest the record. Unlike most systems, we handle TTLs more or less strictly (means: we have to in order to provide sexy response times). So if you changed the records without lowering the TTL in advance, maybe we show attic information.
 |  | |
|---|
Resolution path | Nameserver | IPv4 |
|---|
| d.root-servers.org | 128.8.10.90 |
| cn | e.dns.cn | 203.119.29.1 |
Some hints for your DNS setup.A
 | No IDN. Internationalized domain names generally work, but can lead to trouble in legacy applications. |
 | loejsuw.cn has no A record. |
SOA
 | No SOA record found. This is possibly a subdomain. Please try this utility with the parent of the current query. |
MX
 | You have no MX record set. It is better not to rely on the A-Record fallback. |
SRV
 | No HTTP service records detected. |
 | No SMTP service records detected. |
misc
 | No HINFO record found. |
 | No location record (RFC 1876) found. |
TXT
 | loejsuw.cn has no sender policy framework rules entered. |
NS
 | Could not check for NS record consistency, possibly a subdomain. |