Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


DNS Checking Tool Feedback - Page 3
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

DNS Checking Tool Feedback

13»

Comments

  • @blergh_ said: You need to add support for DNSSEC!

    It's already in my Todo list. Thank you!

  • Veddy nice -- It's similar to a couple of other sites I use for this, but I think DnsInspect is nicer on the eyes. Good job!

  • Works well for me too. I even learned a few things! The system doesn't seem to like Google Apps' MX records, though. I guess they're not optimally configured, which isn't your fault, but still mildly concerning each time you see one of the associated warnings.

  • I've added DMARC (http://www.dmarc.org/) test today.

    DMARC standardizes how email receivers perform email authentication using the well-known SPF and DKIM mechanisms. This means that senders will experience consistent authentication results for their messages at AOL, Gmail, Hotmail, Yahoo! and any other email receiver implementing DMARC.

    If you have configured correctly SPF and/or DKIM, DMARC allows you to specify an email address to receive aggregate reports (XML data) from DMARC receivers (AOL, Gmail, Hotmail, Yahoo!, etc).

    DMARC is really powerful when combined with Dmarcian (http://dmarcian.com/), you can forward those reports to Dmarcian to parse them or you can configure your DMARC policy to send reports directly to Dmarcian. After parsing you'll see detailed reports in a more human format.

  • Nice! bookmarked, will use it from now. :D

  • @vitalie It's unable to detect the PTR record for my mailserver's IPv4 address.
    http://img.d3vm.net/4961a8bf3ce264717df492121b464164.png

  • @dmmcintyre3 said: It's unable to detect the PTR record for my mailserver's IPv4 address.

    Your reverse resolves through a CNAME, let me check the docs if this is OK.

  • twaintwain Member

    @vitalie - You probably used this library some eh?
    http://www.miek.nl/projects/godns/index.html

  • @vitalie said:
    Hi,

    My name is Vitalie Cherpec, I'm developing a DNS checking tool (http://www.dnsinspect.com/). I've migrated this tool from Ruby on Rails + EventMachine to Go (to save resources, now it runs very smoothly on a small VPS :)).

    In this version I've added support for IPv6, although the project is covered by unit tests. I need more testing to catch corner cases, also my English it's not brilliant if you see something stupid let me know :). If you have a few seconds to look at I'll be grateful.

    Thanks,
    Vitalie

    Thanks for you useful information. I have generally checked dns related information from this site WhoisXY.com

  • Mine shows no SPF but rest assured its there.

  • Bookmark'd. Thank you for this tool. You could make a "customer account" where I could store my requests and compare from time to time.

  • Looks great. Another vote for a mobile version or app.

  • vitalievitalie Member
    edited September 2014

    @twain said:
    vitalie - You probably used this library some eh?
    http://www.miek.nl/projects/godns/index.html

    Yes, I'm using Miek's DNS library.

    @Blanoz said:
    Bookmark'd. Thank you for this tool. You could make a "customer account" where I could store my requests and compare from time to time.

    A graph with domain's score over time?

    @jhadley said:
    Looks great. Another vote for a mobile version or app.

    Thanks! I'll start the work on mobile version this month.

  • Sure, why not? Anything that could frizzle your shizzle.

  • I really, really like this tool. My one problem is this "WARNING: All name servers are located in one Autonomous System:"

    I don't think this should be an issue at all if all DNS Servers are not part of the same /24. Just keep in mind that almost 100% of all AnyCAST DNS Servers are originating from the same ASN.

    Also please GitHub that. I'd love to run my own hosted version of it :-)

  • Looking good! Would like to see the progress on this.

  • said: I've migrated this tool from Ruby on Rails + EventMachine to Go (to save resources, now it runs very smoothly on a small VPS :)).

    Looks like a success story :)

  • Include DNSSEC? :)

  • @Dalek

    DalekOfSkaro said: I really, really like this tool. My one problem is this "WARNING: All name servers are located in one Autonomous System:"

    I'll have to add a comment there for Anycast configuration.

    emilv said: Include DNSSEC? :)

    Not, yet.

    Profforg said: Looks like a success story :)

    Yes, it's a best match for Go language:

    [vitalie@orca ~]$ ps aux | egrep 'bin/(server|worker)'

    >

    dns 1704 0.2 2.2 350064 22880 ? Sl 02:13 1:45 ./bin/server --env=production -cfg config/dnsinspect.cfg

    >

    dns 2271 0.1 1.8 690436 18804 ? Sl 02:13 0:39 ./bin/worker --env=production -cfg config/dnsinspect.cfg

  • This looks great, an alternative to intodns.com

  • vitalie said: I'll have to add a comment there for Anycast configuration.

    Any plans for Githubbing it? I'm sure many would love to have their own hosted version and get updates via Github.

    Thanked by 1dedicados
  • Works great. Love it!

  • @Isaiah said:
    Would be nice to see the site/template as being responsive (http://dfcb.github.com/Responsivator/?site=www.dnsinspect.com) or possibly a mobile-friendly version.

    @natestamm said:
    Isaiah one up for that..I am REALLY getting tired of major sites not using responsive design :(

    I've updated the web design to be responsive. Good bye, annoying zoom/scroll on mobiles! :)

    Thanked by 1natestamm
  • ZappieZappie Member, Host Rep, LIR
    edited March 2015

    Nice work.

    However I do not think its valid to check for SPF rr types.

    You currently have:

    "No SPF type records found. All name servers should return identical SPF records."

    As of RFC 7208 the type-99 rr (SPF) should no longer be used and instead only TXT records. Now I know that many still use SPF (and TXT) but with this DNS checker I would imagine you would want to test against the RFC Spec rather than according to what "people are doing"

    IMO - Remove checks for SPF rr types

    Sources:
    http://tools.ietf.org/html/rfc6686#section-6
    http://tools.ietf.org/html/rfc7208#section-3.1
    http://tools.ietf.org/html/rfc7208#section-14.1

    Keep up the great work!

  • VPSnetVPSnet Member, Host Rep

    some peoples use MX record of google to receive email in google or other mail box and mail server only sends mails.
    i think that there should be way to check not domain, but only mail server (SPF, DKIM, DMARK and other things) because one domain can receive mails to gmail inbox and domain`s web page send mails from own smtp or mail server

  • It doesn't seem to like my .co domain for some reason :(

  • @Zappie said:
    [...]
    IMO - Remove checks for SPF rr types
    [...]

    The engine was written a few years ago, it definitely needs an update. :) I'll keep the test but I'll warn users who are still using SPF instead of TXT records.

    @VPSnet said:
    [...]
    i think that there should be way to check not domain, but only mail server (SPF, DKIM, DMARK and other things) because one domain can receive mails to gmail inbox and domain`s web page send mails from own smtp or mail server

    I'm planning to add more specialized tools which will include mail/name server checks.

    @CFarence said:
    It doesn't seem to like my .co domain for some reason :(

    Send me a PM with the domain name, I've noticed this problem too on a few .ru domains.

    Thanks!

  • Mahfuz_SS_EHLMahfuz_SS_EHL Host Rep, Veteran

    Is NameServers on Different ASN really necessary?? Only on Different Subnet works well as IntoDNS says.

  • @vitalie, out of curiousity which language did you write your tool in?

  • @Mahfuz_SS_EHL said:
    Is NameServers on Different ASN really necessary?? Only on Different Subnet works well as IntoDNS says.

    It depends on your needs, I've tried to offer more information that helps you to judge.
    Usually Anycast providers are using only one ASN, also I've seen configurations with "multiple" name servers located on different class C networks all of them located on one physical server. :)

    @ricardo said:
    vitalie, out of curiousity which language did you write your tool in?

    It's written in Go.

    Thanked by 1ricardo
Sign In or Register to comment.