<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE config PUBLIC "-//ZoneCheck//DTD Config V1.0//EN" "msgcat.dtd">
<msgcat lang="en">
<!-- $Id: ns.en,v 1.17 2010/06/01 15:36:06 chabannf Exp $ -->

<!--
# 
# CONTACT     : zonecheck@nic.fr
# AUTHOR      : Stephane D'Alu <sdalu@nic.fr>
#
# CREATED     : 2002/08/02 13:58:17
# REVISION    : $Revision: 1.17 $ 
# DATE        : $Date: 2010/06/01 15:36:06 $
#
# CONTRIBUTORS: (see also CREDITS file)
#
#
# LICENSE     : GPL v3 (or MIT/X11-like after agreement)
# COPYRIGHT   : AFNIC (c) 2003
#
# This file is part of ZoneCheck.
#
# ZoneCheck is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
# 
# ZoneCheck is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with ZoneCheck; if not, write to the Free Software Foundation,
# Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
-->

  <!-- Shortcuts -->
  <shortcut>
    <explanation name="ns_cname">
      <src type="ref" from="rfc" fid="rfc1912#p7">
        <title>IETF RFC1912 (p.7)</title>
        <para>Having NS records pointing to a CNAME is bad and may
          conflict badly with current BIND servers. In fact, current 
          BIND implementations will ignore such records, possibly leading
          to a lame delegation. There is a certain amount of security
          checking done in BIND to prevent spoofing DNS NS records.
          Also, older BIND servers reportedly will get caught in an 
          infinite query loop trying to figure out the address for the
          aliased nameserver, causing a continuous stream of DNS requests
          to be sent.</para>
      </src>
    </explanation>
  </shortcut>


  <!-- Checks -->
  <check name="ns">
    <name>NS record present</name>
    <success>NS record found</success>
    <failure>No NS record found on server</failure>
    <explanation/>
    <details/>
  </check>


  <check name="ns_auth">
    <name>NS authoritative answer</name>
    <success>The NS answer is authoritative</success>
    <failure>The NS answer is not authoritative</failure>
    <explanation/>
    <details/>
  </check>


  <check name="ns_sntx">
    <name>NS name has a valid domain/hostname syntax</name>
    <success>NS name syntax is correct</success>
    <failure>NS name syntax is not correct</failure>
    <explanation sameas="shortcut:label"/>
    <details/>
  </check>


  <check name="ns_cname">
    <name>NS is not an alias</name>
    <success>NS is not an alias</success>
    <failure>NS is not allowed to point to a CNAME alias</failure>
    <explanation sameas="shortcut:ns_cname"/>
    <details/>
  </check>


  <check name="ns_vs_any">
    <name>coherence between NS and ANY records</name>
    <success>NS and ANY agree</success>
    <failure>NS and ANY request disagree</failure>
    <explanation/>
    <details/>
  </check>


  <check name="ns_ip">
    <name>NS can be resolved</name>
    <success>IP addresses of the zone nameserver have been found</success>
    <failure>The IP addresses of the zone nameserver can't be found</failure>
    <explanation/>
    <details><para>The IP address for <zcvar name="name"/> was not 
      known.</para></details>
  </check>


  <!-- Local Variables: -->
  <!-- mode: xml        -->
  <!-- End:             -->
</msgcat>
