DNS report for zone 101-it.de
Hostmaster for zone 101-it.de is: hostmaster@webhost9.netIP settings (as seen from dns2.webhost9.net)
info
You have 2 nameservers.
info
You have nameservers in several C-Nets, that's good!
Mail settings (as seen from dns2.webhost9.net)
warn
You have only 1 mailserver. Consider getting a backup one!
Zone as seen from dns.webhost9.net [85.214.116.243]
info
dns.webhost9.net is running the latest version of the zone(2007100406).
info
SOA serial seems to follow good standards. We recommend it to be in YYYYMMDDxx-format, which yours appear to be. This would suggest that your zone was last updated at 2007-10-04, and has been updated 7 times on that day.
info
This nameserver does not allow zone transfers.
error
Your nameserver supports recursion. This is really bad to have activated on public nameservers since they can then be used for amplification of Denial Of Service attacks! You can find more information about it here: http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
info
Your nameserver responds to queries via TCP.
info
Your nameserver responds authorative for the zone.
info
Your SOA refresh value of 120 minutes is good.
info
Your SOA retry value of 120 minutes is good.
warn
A SOA expiry value of 604800 is too low. This value denotes for how long the zone is valid when the master is down. RFC1912 suggests it should be between 2 and 4 weeks.
warn
A minimum TTL (Time To Live) of 86400 is quite high. RFC2308 recommends a minimum TTL between 1-3 hours.
Zone as seen from dns2.webhost9.net [85.214.78.88]
error
dns2.webhost9.net is out of sync, it's running a version of the zone with serial 2007091806 when the newest one is 2007100406.
info
SOA serial seems to follow good standards. We recommend it to be in YYYYMMDDxx-format, which yours appear to be. This would suggest that your zone was last updated at 2007-09-18, and has been updated 7 times on that day.
info
This nameserver does not allow zone transfers.
error
Your nameserver supports recursion. This is really bad to have activated on public nameservers since they can then be used for amplification of Denial Of Service attacks! You can find more information about it here: http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
info
Your nameserver responds to queries via TCP.
info
Your nameserver responds authorative for the zone.
info
Your SOA refresh value of 120 minutes is good.
info
Your SOA retry value of 120 minutes is good.
warn
A SOA expiry value of 604800 is too low. This value denotes for how long the zone is valid when the master is down. RFC1912 suggests it should be between 2 and 4 weeks.
warn
A minimum TTL (Time To Live) of 86400 is quite high. RFC2308 recommends a minimum TTL between 1-3 hours.