DNS Server Audit
A domain’s authoritative nameservers are the servers that hold its DNS records and answer for it on the internet. This audit asks each of them directly and checks that they respond, agree on the zone serial, refuse open recursion, and match the delegation at the parent.
When to use this: Lookups for a domain fail intermittently, or you have just moved DNS to a new provider. Command prefix dns:
About the DNS Server Audit
Audit a domain’s authoritative nameservers: do they all answer, agree on the SOA serial, avoid open recursion and match the delegation with correct glue?
FAQ
- What is lame delegation?
- A nameserver listed for the domain that does not actually answer authoritatively for it. Resolvers waste time on it and lookups can fail.
- Why does open recursion matter?
- An authoritative server that resolves arbitrary names for anyone can be abused in amplification attacks.