Nameservers and delegation
What it can report
- ✗ high parent zone has no delegation for the domain How to fix it
- ✗ high only one nameserver is delegated How to fix it
- ! low all nameserver addresses share one /24 (or /48) How to fix it
- ✗ critical a delegated server does not answer authoritatively How to fix it
- ✗ high a delegated server does not answer at all How to fix it
- ✗ high a nameserver name has no addresses (NXDOMAIN, no A/AAAA) How to fix it
- ! medium a nameserver name resolves to a non-public address (not contacted) How to fix it
- ! medium a nameserver name is a CNAME (RFC 2181 section 10.3) How to fix it
- ! medium the parent's NS set differs from the zone's own NS set How to fix it
- ! medium the delegated servers publish different NS sets How to fix it
- ✗ high an in-zone nameserver has no glue at the parent How to fix it
- ! medium glue at the parent differs from the nameserver's real address How to fix it
- · info the servers carry different zone serials How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 2 within DNS. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.