Dns Sorgu Hataları

merhabalar. DNS üzerinde 8 adet ZONE' lerim var. DNSstuff sorgumda birden fazla WARNING almaktayım. bunları madde madde paylaşmak istiyorum. eminim ki çoğu arkadaşlarında bu tarz bir sorguda bu tarz warning hatalarını aldıklarını tahmin ediyorum.

Some or all nameservers responded to recursive queries. This should be addressed as soon as possible. Open DNS servers (i.e. externally facing DNS servers that answer recursively) increase the chances of cache poisoning, can degrade performance of your DNS, and can cause your DNS servers to be used in an attack (read RFC5358 section 4 for recommended nameserver configuration). The nameservers that responded to recursive queries are:

NS list does not match list from parent zone. This should be addressed because queries for this domain may require an extra lookup (and more overhead) because there is no direct relationship between the NS records at the parent and the NS records at the authoritative servers. This can cause delays. The mismatched NS list is:

One or more stealth nameservers discovered. This means that one or more nameservers are not listed at both the parent and authoritative nameservers. This can be confusing and can cause delays or other hard to diagnose inconsistencies. The stealth nameservers discovered are:

One or more nameservers responded to version queries. This can be considered a breach of security. If a malicious person or program had access to a version-specific exploit for your DNS server, displaying the version info openly will make their attack much easier. This should be removed or obscured. The nameservers that responded to version queries are:

One or more SOA fields are outside recommended ranges. Values that are out of specifications could cause delays in record updates or unnecessary network traffic. The SOA fields out of range are:

Only one MX record exists within the zone. This is ok, but it is a better practice to have at least two mail servers operating on a domain, to ensure more reliable mail deliverability. The MX record provided is:

Malformed greeting or no A records found matching banner text for following servers, and banner is not an address literal. RFC5321 requires one or the other (should not be a CNAME). If this is not set correctly, some mail platforms will reject or delay mail from you, and can cause hard to diagnose issues with deliverability. Mailserver details:

An SPF (type 99) record was not found. This record type is planned to supplant the SPF formatted TXT records, and emerging software may eventually only process this record type.