lswz.gov.cn DNS Report

Health Score: 37%

Need help fixing DNS ? Get an expert advise at support forum

Checked: 1 week before

Parent

NS records at parent servers

ns.cei.cn
ipv6-ns1.cei.cn
stup5.cei.cn
[These were obtained from c.dns.cn.]

Glue at parent nameservers 0/7

WARNING The parent servers are not providing glue for all your nameservers. This means that they are supplying the NS records (host.example.com), but not supplying the A records. That may cause some extra milliseconds in DNS. This will usually occur if your DNS servers are not in the same TLD as your domain

NS

Mismatched glue 7/7

Skip glue checking. Make sure the nameservers domain is good standing Check cei.cn

Nameservers A records 0/7

Some servers does not provide A records for nameservers.
missing A record(s) for (ipv6-ns1.cei.cn,ipv6-ns2.cei.cn) at nameserver 203.207.119.8

Nameservers report identical NS records 0/7

The NS records at your nameservers are different
At (203.207.119.8) there are nameservers: ns.cei.gov.cn. ipv6-ns1.cei.cn. stup5.cei.gov.cn. ipv6-ns2.cei.cn.
At (203.207.119.7) there are nameservers:

Nameservers respond 0/10

Some nameservers does not respond:
ipv6-ns1.cei.cn.

Nameserver name validity 7/7

SUCCESS All of the NS records that your nameservers report are valid (no IPs or partial domain names).

Number of nameservers 5/5

SUCCESS You have 3 nameservers. You must have at least 2 nameservers (RFC2182 section 5 recommends at least 3 nameservers), and preferably no more than 7.

Lame nameservers 0/7

Lame nameservers:
203.207.119.7

Missing (stealth) nameservers 0/7

DANGER There are nameservers not listed at the parent servers:
ns.cei.gov.cn.
stup5.cei.gov.cn.
ipv6-ns2.cei.cn.

Root missing nameservers 0/7

DANGER There are nameservers not listed at your nameservers:
ns.cei.cn.
stup5.cei.cn.

Nameservers on separate class C's 7/7

SUCCESS Nameservers are in a different networks.

public IPs 7/7

SUCCESS All of your NS records appear to use public IPs.

SOA

SOA record

SOA record is:
Hostmaster email
bind-admin.ns.lswz.gov.cn
Serial
2020121101
Refresh
10800
Retry
1800
Expire
3600000
TTL
7200

Serial agreement 0/7

DANGER Some nameservers have a different soa serial number That can occur because of recent master update (slave have not loaded master zone yet) or the is a problem in DNS.
There is serial 2020121101 at nameserver(s) (203.207.119.8)
There is serial at nameserver(s) (203.207.119.7)

SOA MNAME 0/3

DANGER SOA (Start of Authority) record states that your master (primary) name server is: ns.lswz.gov.cn, but that server is not listed at the parent servers.

Serial value 1/1

SUCCESS SOA serial number is: 2020121101 This appears to be in the recommended format of YYYYMMDDnn, where 'nn' is the revision. This number must be incremented every time you make a DNS change.

Refresh value 1/1

SUCCESS SOA Retry interval is : 10800 seconds. This seems OK. (Values about 3600-7200 seconds is good if not using DNS NOTIFY; RFC1912 2.2 recommends a value between 1200 to 43200 seconds (20 minutes to 12 hours)). This value determines how often secondary/slave nameservers check with the master for updates.

Retry value 1/1

SUCCESS SOA Retry interval is : 1800 seconds. This seems OK. (Values about 120-7200 seconds is good). The retry value is the amount of time your secondary/slave nameservers will wait to contact the master nameserver again if the last attempt failed.

Expire value 0/1

WARNING SOA Expire time is : 3600000 seconds. This seems too big;. (Values 604800 to 2419200 seconds (1-4 weeks) is good). RFC1912 suggests 2-4 weeks. This is how long a secondary/slave nameserver will wait before considering its DNS data stale if it can't reach the primary nameserver.

TTL value 1/1

SUCCESS SOA Expire time is : 7200 seconds. This seems OK. (about 300 to 86400 seconds or 5 min - 24 hours is good). RFC2308 suggests a value of 1-3 hours. This value used to determine the default (technically, minimum) TTL (time-to-live) for DNS entries, but now is used for negative caching.

Info

DNS trace

Trace to lswz.gov.cn
lookup lswz.gov.cn at A.ROOT-SERVERS.NET(198.41.0.4) 6 ms
A.ROOT-SERVERS.NET(198.41.0.4) refer to c.dns.cn(203.119.27.1)
lookup lswz.gov.cn at c.dns.cn(203.119.27.1) 164 ms
c.dns.cn(203.119.27.1) refer to ns.cei.cn(unknow IP)
extra IP lookup for ns.cei.cn at root server A.ROOT-SERVERS.NET(198.41.0.4)
lookup ns.cei.cn at A.ROOT-SERVERS.NET(198.41.0.4) 5 ms
A.ROOT-SERVERS.NET(198.41.0.4) refer to c.dns.cn(203.119.27.1)
lookup ns.cei.cn at c.dns.cn(203.119.27.1) 33 ms
c.dns.cn(203.119.27.1) refer to ns1.cei.cn(203.207.119.8)
lookup ns.cei.cn at ns1.cei.cn(203.207.119.8) 265 ms
got A record 'ns.cei.cn IN A 203.207.119.8' from ns.cei.cn(203.207.119.8)
lookup lswz.gov.cn at ns.cei.cn(203.207.119.8) 263 ms
got A record 'lswz.gov.cn IN A 203.207.196.248' from lswz.gov.cn(203.207.119.8)
Total time: 736 ms