SYSTEM

Unspecified (Unspecified)
Using version v6.0.0 of the Zonemaster engine.

BASIC

The domain must have a parent domain (Basic01)
The parent zone is "no" as returned from name servers "i.nic.no/194.146.106.6; i.nic.no/2001:67c:1010:1::53; njet.norid.no/156.154.101.12; not.norid.no/156.154.100.12; not.norid.no/2001:502:ad09::12; x.nic.no/128.39.8.40; x.nic.no/2001:700:0:412f::40; y.nic.no/193.75.4.22; y.nic.no/2001:8c0:8200:1::2; z.nic.no/158.38.8.133; z.nic.no/2001:700:0:52d:158:38:8:133".
The domain must have a parent domain (Basic01)
The zone "ed25519.no" is found.
The domain must have at least one working name server (Basic02)
Authoritative answer on SOA query for "ed25519.no" is returned by name servers "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1".
Unspecified (Unspecified)
Functional nameserver found. "A" query for www.ed25519.no test skipped.

ADDRESS

Name server address must be globally routable (Address01)
All Nameserver addresses are in the routable public addressing space.
Reverse DNS entry exists for name server IP address (Address02)
Reverse DNS entry exists for each Nameserver IP address.
Reverse DNS entry matches name server name (Address03)
Every reverse DNS entry matches name server name.

CONNECTIVITY

AS Diversity (Connectivity03)
At least two IPv4 addresses of the authoritative nameservers are announced by different AS sets. A merged list of all AS: (1921, 12996, 208045).
AS Diversity (Connectivity03)
At least two IPv6 addresses of the authoritative nameservers are announced by different AS sets. A merged list of all AS: (1921, 12996, 208045).
IP Prefix Diversity (Connectivity04)
The following name server(s) are announced in unique IPv4 prefix(es): "ns1.hyp.net/151.249.124.1; ns2.hyp.net/192.174.68.10; ns3.hyp.net/151.249.126.3"
IP Prefix Diversity (Connectivity04)
The following name server(s) are announced in unique IPv6 prefix(es): "ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/2a01:5b40:ac3::1"

CONSISTENCY

SOA serial number consistency (Consistency01)
Saw SOA serial number 1726102409 on following nameserver set : ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1.
SOA serial number consistency (Consistency01)
A single SOA serial number was found (1726102409).
SOA RNAME consistency (Consistency02)
A single SOA rname value was found (hostmaster.domeneshop.no.).
SOA timers consistency (Consistency03)
A single SOA time parameter set was seen (REFRESH=14400, RETRY=3600, EXPIRE=1209600, MINIMUM=3600).
Name server NS consistency (Consistency04)
A single NS set was found (ns1.hyp.net.; ns2.hyp.net.; ns3.hyp.net.).
Consistency between glue and authoritative data (Consistency05)
Glue records are consistent between glue and authoritative data.
SOA MNAME consistency (Consistency06)
A single SOA mname value was seen (ns1.hyp.net.).

DELEGATION

Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers. Lower limit set to 2. Name servers: ns1.hyp.net; ns2.hyp.net; ns3.hyp.net
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers. Lower limit set to 2. Name servers: ns1.hyp.net; ns2.hyp.net; ns3.hyp.net
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers that resolve to IPv4 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/151.249.124.1; ns2.hyp.net/192.174.68.10; ns3.hyp.net/151.249.126.3
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers that resolve to IPv6 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/2a01:5b40:ac3::1
Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers that resolve to IPv4 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/151.249.124.1; ns2.hyp.net/192.174.68.10; ns3.hyp.net/151.249.126.3
Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers that resolve to IPv6 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/2a01:5b40:ac3::1
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers in parent are unique.
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers in child are unique.
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers are unique.
No truncation of referrals (Delegation03)
The smallest possible legal referral packet is smaller than 513 octets (it is 332).
Name server is authoritative (Delegation04)
All these nameservers are confirmed to be authoritative : ns1.hyp.net; ns2.hyp.net; ns3.hyp.net.
Name server must not point at CNAME alias (Delegation05)
No nameserver points to CNAME alias.
Existence of SOA (Delegation06)
All the nameservers have SOA record.
Parent glue name records present in child (Delegation07)
All of the nameserver names are listed both at parent and child.

DNSSEC

Verify NSEC3 parameters (DNSSEC03)
The following servers respond with a legal hash algorithm in NSEC3. Fetched from name servers "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1".
Verify NSEC3 parameters (DNSSEC03)
The following servers respond with NSEC3 opt-out disabled (as recommended). Fetched from name servers "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1".
Verify NSEC3 parameters (DNSSEC03)
The following servers respond with NSEC3 iteration value set to zero (as recommended). Fetched from name servers "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1".
Verify NSEC3 parameters (DNSSEC03)
The following servers respond with a legal empty salt in NSEC3. Fetched from name servers "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1".
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag 34103 and covering type(s) DNSKEY expires at : Fri Oct 11 23:53:30 2024.
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag 63755 and covering type(s) DNSKEY expires at : Fri Oct 11 23:53:30 2024.
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag 63755 and covering type(s) SOA expires at : Fri Oct 11 23:53:30 2024.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 34103 uses algorithm number 15 (Ed25519), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 63755 uses algorithm number 15 (Ed25519), which is OK.
Zone contains NSEC or NSEC3 records (DNSSEC10)
The zone has NSEC3 records. Fetched from the nameservers with IP addresses "151.249.124.1; 151.249.126.3; 192.174.68.10; 2001:67c:1bc::10; 2a01:5b40:ac1::1; 2a01:5b40:ac3::1".
Existence of CDS and CDNSKEY (DNSSEC15)
No CDS or CDNSKEY RRsets are found on any name server.

NAMESERVER
Notice (1)

A name server should not be a recursor (Nameserver01)
Nameserver ns1.hyp.net/151.249.124.1 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns1.hyp.net/2a01:5b40:ac1::1 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns2.hyp.net/192.174.68.10 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns2.hyp.net/2001:67c:1bc::10 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns3.hyp.net/151.249.126.3 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns3.hyp.net/2a01:5b40:ac3::1 is not a recursor.
Test of EDNS0 support (Nameserver02)
The following nameservers support EDNS0 : ns3.hyp.net/151.249.126.3; ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/192.174.68.10; ns3.hyp.net/2a01:5b40:ac3::1; ns2.hyp.net/2001:67c:1bc::10.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns1.hyp.net/151.249.124.1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns1.hyp.net/2a01:5b40:ac1::1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns2.hyp.net/192.174.68.10.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns2.hyp.net/2001:67c:1bc::10.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns3.hyp.net/151.249.126.3.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns3.hyp.net/2a01:5b40:ac3::1.
Same source address (Nameserver04)
All nameservers reply with same IP used to query them.
Behaviour against AAAA query (Nameserver05)
The following nameservers answer AAAA queries without problems : ns1.hyp.net/151.249.124.1; ns3.hyp.net/151.249.126.3; ns2.hyp.net/2001:67c:1bc::10; ns3.hyp.net/2a01:5b40:ac3::1; ns2.hyp.net/192.174.68.10; ns1.hyp.net/2a01:5b40:ac1::1.
NS can be resolved (Nameserver06)
All nameservers succeeded to resolve to an IP address.
To check whether authoritative name servers return an upward referral (Nameserver07)
None of the following nameservers returns an upward referral : ns1.hyp.net; ns2.hyp.net; ns3.hyp.net.
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns1.hyp.net/151.249.124.1 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns1.hyp.net/2a01:5b40:ac1::1 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns2.hyp.net/192.174.68.10 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns2.hyp.net/2001:67c:1bc::10 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns3.hyp.net/151.249.126.3 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns3.hyp.net/2a01:5b40:ac3::1 preserves original case of queried names (WwW.Ed25519.nO).
Testing QNAME case sensitivity (Nameserver09)
When asked for SOA records on "www.ed25519.no" with different cases, all servers reply consistently.
Checking for revealed software version (Nameserver15)
The following name server(s) respond to software version query "version.bind" with string "reg-sto1". Returned from name servers: "ns2.hyp.net/192.174.68.10; ns2.hyp.net/2001:67c:1bc::10"
Checking for revealed software version (Nameserver15)
The following name server(s) do not reveal the software version. Returned from name servers: "ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1"

SYNTAX

No illegal characters in the domain name (Syntax01)
No illegal characters in the domain name (ed25519.no).
No hyphen ('-') at the start or end of the domain name (Syntax02)
Neither end of any label in the domain name (ed25519.no) has a hyphen.
There must be no double hyphen ('--') in position 3 and 4 of the domain name (Syntax03)
Domain name (ed25519.no) has no label with a double hyphen ('--') in position 3 and 4 (with a prefix which is not 'xn--').
The NS name must have a valid domain/hostname (Syntax04)
Nameserver (ns1.hyp.net) syntax is valid.
The NS name must have a valid domain/hostname (Syntax04)
Nameserver (ns2.hyp.net) syntax is valid.
The NS name must have a valid domain/hostname (Syntax04)
Nameserver (ns3.hyp.net) syntax is valid.
Misuse of '@' character in the SOA RNAME field (Syntax05)
There is no misused '@' character in the SOA RNAME field (hostmaster.domeneshop.no.).
No illegal characters in the SOA RNAME field (Syntax06)
The SOA RNAME field (hostmaster@domeneshop.no) is compliant with RFC2822.
No illegal characters in the SOA MNAME field (Syntax07)
SOA MNAME (ns1.hyp.net) syntax is valid.
MX name must have a valid hostname (Syntax08)
Domain name MX (mx.domeneshop.no) syntax is valid.

ZONE

SOA 'refresh' minimum value (Zone02)
SOA 'refresh' value (14400) is at least equal to the minimum recommended value (14400).
SOA 'retry' lower than 'refresh' (Zone03)
SOA 'refresh' value (14400) is higher than the SOA 'retry' value (3600).
SOA 'retry' at least 1 hour (Zone04)
SOA 'retry' value (3600) is at least equal to the minimum recommended value (3600).
SOA 'expire' minimum value (Zone05)
SOA 'expire' value (1209600) is higher than the minimum recommended value (604800) and not lower than the 'refresh' value (14400).
SOA 'minimum' maximum value (Zone06)
SOA 'minimum' value (3600) is between the recommended ones (300/86400).
SOA master is not an alias (Zone07)
SOA 'mname' value (ns1.hyp.net) refers to a NS which is not an alias (CNAME).
SOA master is not an alias (Zone07)
SOA 'mname' value (ns1.hyp.net) refers to a NS which is not an alias (CNAME).
MX is not an alias (Zone08)
MX record for the domain is not pointing to a CNAME.
MX record present (Zone09)
Mail targets in the MX RRset "mx.domeneshop.no." returned from name servers "151.249.126.3; 2a01:5b40:ac1::1; 2001:67c:1bc::10; 151.249.124.1; 192.174.68.10; 2a01:5b40:ac3::1".
No multiple SOA records (Zone10)
A unique SOA record is returned by all nameservers of the zone.
SPF policy validation (Zone11)
The SPF policy of ed25519.no has correct syntax.

ed25519.no

Former tests

ed25519.no