Zone Check

Lang: EN / FR

#

The ZoneCheck program (freely available here for download) performs several tests on your zone (ie: domain) to ensure that it is correctly configured and can be safely delegated, providing a certain quality to your domain (see the benefit section).
For detailed information on how to fill this form see the help section.

> The time required to completely verify a zone can take from 30 seconds up to 5 minutes depending on the network speed of the server being accessed. If it takes more than a minute it generally means we are encountering problems accessing your nameservers (configuration error, firewall, ...) and are waiting for timeout.

## Zone information

Zone
Primary
IPs
Secondary
IPs
Secondary
IPs
Secondary
IPs
Secondary
IPs
Secondary
IPs
Secondary
IPs
Secondary
IPs

## Options

Output
zone summary
test name
explanations
details
progress bar
description
nothing
report
format
language
Error report
default error
all fatals
all warnings
don't stop on fatal
fatal only
report ok
profile
Extra tests performed
mail delivery
zone transfer
RIR databases
Transport layer
IPv4
IPv6
STD
UDP
TCP
DNSSEC
DNSSEC tests
Hash Algorithm:
DS:
DNSKEY:

## Benefit

Among the tests performed you can find checking for:

- authoritative nameserver for your zone, ensuring you will be able to use your domain from outside your network.
- correct list of secondary nameservers, so that if your primary nameserver is temporarily unreachable, you will still be visible on the internet;
- check for mail delivery, so that you don't become the prey of spammers and become blacklisted

## Help

### Form

Zone Information
Zone
The domain (ie: zone) that should be tested (ie: the domain name that you want to register).
Primary
The nameserver that is considered as primary (the one in the SOA record if it is public).
Secondary
The secondary nameservers (all the NS records associated with the zone, except for the one listed above).
IPs
List of IP addresses associated with the nameserver.

- they are only required if they can't be resolved (ie: they are in the zone that you want to register).
- if you have several addresses you must use a space or a comma as the separator.
- the form accepts IPv4 and IPv6 addresses.

Options: Output
zone summary
Includes a summary about the zone and its nameservers in the generated report
test name
Includes the name of the test that has been performed when reporting errors
explanations
Includes an explanation (when the test failed) about the purpose of the test and why you should fix it.
details
Includes details (when the test failed) about the culprit elements.
progress bar
Display information about the test progression using a a progress bar (require javascript and Mozilla or IE5+ for correct rendering).
description
Give a short description of the test when it is performed.
nothing
Don't display information about the test progression.
report
Select the type of generated report you want.
format
Select the format in which you want the report (HTML or plain text).
language
Select the language that you want the report generated in.
Options: Error report
default error
Errors are reported with the default severity associated with them.
all fatals
All errors are considered fatals.
all warnings
All errors are considered warnings.
don't stop on fatal
Keep going even after encountering a fatal error (this could lead to some unexpected results).
report ok
Report test that passed.
Options: Extra tests performed
mail delivery
Perform extra checking on mail delivery for typical mail accounts (hostmaster, postmaster, ...) associated with domain names.
zone transfer
Perform additional tests on the zone retrieved after a zone transfer.
RIR databases
Check that IP addresses used are registered in the RIR databases
Options: Transport layer
IPv4, IPv6
Select the routing layer (if none are selected it will default to IPv4 and IPv6).
STD, UDP, TCP
Select the transport layer you want for interrogating your nameservers.
Option: DNSSEC
DNSSEC tests
Set the DNSSEC tests policy to mandatory, if not tests will be warnings
DS and Hash Algorithm
Gives the hash of the public key and the algorithm used to do that
The hash of the key must be encoded in hexadecimal (blanks are removed). The Hash Algorithm is the number given by IANA and corresponding to the algorithm.
DNSKEY
Gives the public key used as a Security Entry Point. The key must be encoded in base64 (blanks will be removed).

### Results

- the word generic means that the error is eitheir unrelated or present on all nameservers,
- when an error is between [brackets], this means that the test failed for external reasons. The reasons are displayed next to it.

Release: $Name: ZC-3_0_5 $
Last modified: Thu Feb 19 14:44:11 CET 2004