DNS report for zone “ktmofaspen.net”
Hostmaster for zone ktmofaspen.net is: noc@sopris.netIP settings (as seen from ns2.sopris.net)
info
You have 2 nameservers.
info
You have nameservers in several C-Nets, that's good!
Mail settings (as seen from ns2.sopris.net)
info
You have 3 mailservers.
Zone as seen from “ns1.sopris.net” [216.237.72.66]
info
ns1.sopris.net is running the latest version of the zone(2006020101).
info
SOA serial seems to follow good standards. We recommend it to be in YYYYMMDDxx-format, which yours appear to be. This would suggest that your zone was last updated at 2006-02-01, and has been updated 2 times on that day.
warn
This nameserver supports zone transfers. This enables people to fetch a list of all DNS records in your zone. To view the list please click here!
error
Your nameserver supports recursion. This is really bad to have activated on public nameservers since they can then be used for amplification of Denial Of Service attacks! You can find more information about it here: http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
info
Your nameserver responds to queries via TCP.
info
Your nameserver responds authorative for the zone.
info
Your SOA refresh value of 5 minutes is good.
info
Your SOA retry value of 5 minutes is good.
warn
A SOA expiry value of 3600000 is quite high. You should consider lowering this to a value inbetween 2 and 4 weeks. This value defines for how long the zone should be valid when the slaves are unable to reach the master.
Zone as seen from “ns2.sopris.net” [216.237.77.2]
info
ns2.sopris.net is running the latest version of the zone(2006020101).
info
SOA serial seems to follow good standards. We recommend it to be in YYYYMMDDxx-format, which yours appear to be. This would suggest that your zone was last updated at 2006-02-01, and has been updated 2 times on that day.
warn
This nameserver supports zone transfers. This enables people to fetch a list of all DNS records in your zone. To view the list please click here!
error
Your nameserver supports recursion. This is really bad to have activated on public nameservers since they can then be used for amplification of Denial Of Service attacks! You can find more information about it here: http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
info
Your nameserver responds to queries via TCP.
info
Your nameserver responds authorative for the zone.
info
Your SOA refresh value of 5 minutes is good.
info
Your SOA retry value of 5 minutes is good.
warn
A SOA expiry value of 3600000 is quite high. You should consider lowering this to a value inbetween 2 and 4 weeks. This value defines for how long the zone should be valid when the slaves are unable to reach the master.