Check public DNS health and RFC compliance

Question

Every now and again I like to run checks on my DNS servers to make sure they are running right and to RFC spec. I used to use the DNSTools website to do this as it gave me a pretty good picture of what was going on - are all my servers responding to the outside world, and the important (NS, MX especially ) records still up and replicated right. Also to see if my MX records have managed to make it onto any blacklists.

Blacklists have always been kind of a pain as I haven't been able to find a reliable "one stop shop" that lets you check against most of the major blacklists out there.

I haven't used DNS tools in a while and now they are requiring you to pay (which I have nothing against, just hard to justify to the superiors when you have invested in a large internal monitoring solution and I'm just doing a "feel good check")

What do my fellow sysadmins uses to check on their DNS records?

Solution 1

It's not like the old DNSStuff but http://www.iptools.com/ and http://www.mxtoolbox.com are good replacements.

Solution 2

I use zonecheck (http://www.zonecheck.fr/). It doesn't do everything that some paid DNS checking services do, but it does do many check, is both free and Free, and is available in many distros' standard repositories (see here and here for Debian/Lenny) so is relatively easy to install on your own internal services instead of relying on other sites.

Solution 3

I've found http://clez.net/net.dns to be good replacement has some other tools which are worth looking at too.

Solution 4

What about intodns.com ? It's a really good site an provides a really good analysis of your DNS.

View more solutions

Comments

[l0c0b0x]

serverfault.com/questions/7489/…

[Zypher]

@l0c0b0x: My search foo must have been off i did search first. Although i'm still very interested in the Blacklist check part of my question.

[Frenchie]

intodns.com might also be worth looking at.

[bortzmeyer]

Does not work with IPv6 name servers (it spits a spurious error, saying they don't have A records). But its biggest problem is that it reports an error when the tested server is NOT recursive! A tool to avoid.