<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE config PUBLIC "-//ZoneCheck//DTD Config V1.0//EN" "msgcat.dtd">
<msgcat lang="en">
<!-- $Id: soa.en,v 1.33 2010/06/01 15:36:06 chabannf Exp $ -->

<!--
# 
# CONTACT     : zonecheck@nic.fr
# AUTHOR      : Stephane D'Alu <sdalu@nic.fr>
#
# CREATED     : 2002/08/02 13:58:17
# REVISION    : $Revision: 1.33 $ 
# DATE        : $Date: 2010/06/01 15:36:06 $
#
# CONTRIBUTORS: (see also CREDITS file)
#
#
# LICENSE     : GPL v3 (or MIT/X11-like after agreement)
# COPYRIGHT   : AFNIC (c) 2003
#
# This file is part of ZoneCheck.
#
# ZoneCheck is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
# 
# ZoneCheck is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with ZoneCheck; if not, write to the Free Software Foundation,
# Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
-->

  <!-- Shortcuts -->
  <shortcut>
    <explanation name="email_sntx">
      <src type="ref" from="rfc" fid="rfc1034#p9">
        <title>IETF RFC1034 (p.9), RFC1912 (p.3)</title>
        <para>Email addresses are converted by using the following rule:
          local-part@mail-domain  ==&gt;  local-part.mail-domain 
          if local-part contains a dot in should be backslashed 
          (for 'bind').</para>
      </src>
    </explanation>
    <explanation name="soa_local_policy">
      <src type="adv">
        <title><zcconst name="registry"/> registry policy</title>
        <para>The registry requires the SOA fields to be inside
          a defined range: the 'expire' should be between
          <zcconst name="soa:expire:min"  display="duration"/> and
          <zcconst name="soa:expire:max"  display="duration"/>, 
          the 'minimum' between
          <zcconst name="soa:minimum:min" display="duration"/> and
          <zcconst name="soa:minimum:max" display="duration"/>, 
          the 'refresh' between
          <zcconst name="soa:refresh:min" display="duration"/> and 
          <zcconst name="soa:refresh:max" display="duration"/>, 
          and at last the 'retry' between
          <zcconst name="soa:retry:min"   display="duration"/> and
          <zcconst name="soa:retry:max"   display="duration"/>.</para>
      </src>
    </explanation>
  </shortcut>


  <!-- Checks -->
  <check name="soa">
    <name>SOA record present</name>
    <success>SOA record found</success>
    <failure>No SOA record found on server</failure>
    <explanation/>
    <details/>
  </check>


  <check name="soa_auth">
    <name>SOA authoritative answer</name>
    <success>The SOA answer is authoritative</success>
    <failure>The SOA answer is not authoritative</failure>
    <explanation/>
    <details/>
  </check>


  <check name="soa_contact_sntx_at">
    <name>misused '@' characters in SOA contact name</name>
    <success>No misuse of '@' character in SOA contact name</success>
    <failure>The contact name contains the character '@'</failure>
    <explanation sameas="shortcut:email_sntx"/>
    <details/>
  </check>


  <check name="soa_contact_sntx">
    <name>illegal characters in SOA contact name</name>
    <success>No illegal characters in SOA contact name</success>
    <failure>The contact name contains illegal characters</failure>
    <explanation sameas="shortcut:email_sntx"/>
    <details/>
  </check>


  <check name="soa_master_sntx">
    <name>illegal characters in SOA master nameserver</name>
    <success>No illegal characters in SOA master nameserver</success>
    <failure>The SOA master nameserver contains illegal characters</failure>
    <explanation sameas="shortcut:label"/>
    <details/>
  </check>


  <check name="soa_master_fq">
    <name>fully qualified master nameserver in SOA</name>
    <success>The SOA master nameserver is fully qualified</success>
    <failure>The SOA master nameserver is not fully qualified</failure>
    <explanation/>
    <details><para>The master nameserver (<zcvar name="mname"/>) is 
      certainly missing the final dot in the configuration file.</para></details>
  </check>


  <check name="soa_serial_fmt_YYYYMMDDnn">
    <name>serial number of the form YYYYMMDDnn</name>
    <success>The serial number follows the form YYYYMMDDnn</success>
    <failure>The format of the serial number is not YYYYMMDDnn</failure>
    <explanation>
      <src type="ref" from="rfc" fid="rfc1912#p3">
        <title>RFC1912 (p.3)</title>
        <para>The recommended syntax is YYYYMMDDnn (YYYY=year, MM=month,
          DD=day, nn=revision number).</para>
      </src>
     </explanation>
    <details><para>The serial <zcvar name="serial"/> doesn't seem to be 
      in the YYYYMMDDnn format.</para></details>
  </check>


  <check name="soa_expire">
    <name>SOA 'expire' between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></name>
    <success>The 'expire' is between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></success>
    <failure>The 'expire' period should be between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></failure>
    <explanation sameas="shortcut:soa_local_policy"/>
    <details><para>The expire value is 
      <zcvar name="expire" display="duration"/> and should be between 
      <zcconst name="soa:expire:min" display="duration"/> and
      <zcconst name="soa:expire:max" display="duration"/>.</para></details>
  </check>


  <check name="soa_minimum">
    <name>SOA 'minimum' between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></name>
    <success>The 'minimum' is between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></success>
    <failure>The 'minimum' period should be between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></failure>
    <explanation sameas="shortcut:soa_local_policy"/>
    <details><para>The minimum value is 
      <zcvar name="minimum" display="duration"/> and should be between 
      <zcconst name="soa:minimum:min" display="duration"/> and
      <zcconst name="soa:minimum:max" display="duration"/>.</para></details>
  </check>


  <check name="soa_refresh">
    <name>SOA 'refresh' between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></name>
    <success>The 'refresh' is between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></success>
    <failure>The 'refresh' period should be between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></failure>
    <explanation sameas="shortcut:soa_local_policy"/>
    <details><para>The refresh value is 
      <zcvar name="refresh" display="duration"/> and should be between 
      <zcconst name="soa:refresh:min" display="duration"/> and
      <zcconst name="soa:refresh:max" display="duration"/>.</para></details>
  </check>


  <check name="soa_retry">
    <name>SOA 'retry' between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></name>
    <success>The 'retry' is between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></success>
    <failure>The 'retry' period should be between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></failure>
    <explanation sameas="shortcut:soa_local_policy"/>
    <details><para>The retry value is 
      <zcvar name="retry" display="duration"/> and should be between 
      <zcconst name="soa:retry:min" display="duration"/> and
      <zcconst name="soa:retry:max" display="duration"/>.</para></details>
  </check>


  <check name="soa_retry_refresh">
    <name>SOA 'retry' lower than 'refresh'</name>
    <success>The 'retry' is lower than the 'refresh'</success>
    <failure>The 'retry' period must be lower than the 'refresh' period</failure>
    <explanation>
      <src type="ref" from="rfc" fid="rfc1912#p4">
        <title>IETF RFC1912 (p.4)</title>
        <para>The 'retry' value is typically a fraction of the 
          'refresh' interval.</para>
      </src>
    </explanation>
    <details><para>The retry (<zcvar name="retry"/> sec) should be lower 
      than the refresh (<zcvar name="refresh"/> sec).</para></details>
  </check>


  <check name="soa_expire_7refresh">
    <name>SOA 'expire' at least 7 times 'refresh'</name>
    <success>The 'expire' is at least 7 times the 'refresh'</success>
    <failure>The 'expire' period must be at least 7 times greater than 'refresh'</failure>
    <explanation/>
    <details><para>The expire (<zcvar name="expire"/> sec) is not at
      least 7 times greater than the refresh (<zcvar name="refresh"/> sec),
      you should correct one of them.</para></details>
  </check>


  <check name="soa_ns_cname">
    <name>SOA master is not an alias</name>
    <success>The SOA master is not an alias</success>
    <failure>SOA master is not allowed to point to a CNAME alias</failure>
    <explanation sameas="shortcut:ns_cname"/>
    <details><para>The master (<zcvar name="master"/>) is a CNAME alias
      to <zcvar name="alias"/>.</para></details>
  </check>


  <check name="soa_vs_any">
    <name>coherence between SOA and ANY records</name>
    <success>SOA and ANY agree</success>
    <failure>SOA and ANY request disagree</failure>
    <explanation/>
    <details/>
  </check>

  <check name="soa_drift_serial">
    <name>excessive drift of serial number with primary nameserver</name>
    <success>Acceptable or no drift of serial number with primary nameserver</success>
    <failure>Excessive drift of serial number with primary nameserver</failure>
    <explanation/>
    <details><para>The expected value for the serial (taking drift into 
      account) should have been more than <zcvar name="serial_min"/>, 
      but is <zcvar name="serial_this"/> instead of 
      <zcvar name="serial_ref"/> as on <zcvar name="host_ref"/>).</para></details>
  </check>

  <check name="soa_coherence_serial">
    <name>coherence of serial number with primary nameserver</name>
    <success>The serial number is consistent with primary nameserver</success>
    <failure>The serial number is not consistent with primary nameserver</failure>
    <explanation/>
    <details><para>got serial <zcvar name="serial_this"/> instead of 
      <zcvar name="serial_ref"/> as on <zcvar name="host_ref"/>.</para></details>
  </check>


  <check name="soa_coherence_contact">
    <name>coherence of administrative contact with primary nameserver</name>
    <success>The contact is consistent with primary nameserver</success>
    <failure>The contact is not consistent with primary nameserver</failure>
    <explanation/>
    <details><para>got contact <zcvar name="rname_this"/> instead of
      <zcvar name="rname_ref"/> as on <zcvar name="host_ref"/>.</para></details>
  </check>


  <check name="soa_coherence_master">
    <name>coherence of master with primary nameserver</name>
    <success>The master is consistent with primary nameserver</success>
    <failure>The master is not consistent with primary nameserver</failure>
    <explanation/>
    <details><para>Got master <zcvar name="mname_this"/> instead of 
      <zcvar name="mname_ref"/> as on <zcvar name="host_ref"/>.</para></details>
  </check>


  <check name="soa_coherence">
    <name>coherence of SOA with primary nameserver</name>
    <success>The SOA is consistent with primary nameserver</success>
    <failure>The SOA is not consistent with primary nameserver</failure>
    <explanation/>
    <details/>
  </check>

  <!-- Local Variables: -->
  <!-- mode: xml        -->
  <!-- End:             -->
</msgcat>
