SYSTEM

Unspecified (Unspecified)
Using version v4.0.2 of the Zonemaster engine.

BASIC

The domain must have a parent domain (Basic01)
Basic:Basic01:HAS_PARENT pname=no; zone=ed448.no
The domain must have at least one working name server (Basic02)
IPv4 is enabled, can send "NS" query to ns1.hyp.net/151.249.124.1.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns1.hyp.net/151.249.124.1; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
The domain must have at least one working name server (Basic02)
IPv6 is enabled, can send "NS" query to ns1.hyp.net/2a01:5b40:ac1::1.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns1.hyp.net/2a01:5b40:ac1::1; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
The domain must have at least one working name server (Basic02)
IPv4 is enabled, can send "NS" query to ns2.hyp.net/151.249.125.2.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns2.hyp.net/151.249.125.2; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
The domain must have at least one working name server (Basic02)
IPv6 is enabled, can send "NS" query to ns2.hyp.net/2a01:5b40:ac2::1.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns2.hyp.net/2a01:5b40:ac2::1; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
The domain must have at least one working name server (Basic02)
IPv4 is enabled, can send "NS" query to ns3.hyp.net/151.249.126.3.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns3.hyp.net/151.249.126.3; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
The domain must have at least one working name server (Basic02)
IPv6 is enabled, can send "NS" query to ns3.hyp.net/2a01:5b40:ac3::1.
The domain must have at least one working name server (Basic02)
Basic:Basic02:HAS_NAMESERVERS ns=ns3.hyp.net/2a01:5b40:ac3::1; nsnlist=ns1.hyp.net., ns2.hyp.net., ns3.hyp.net.
Unspecified (Unspecified)
Functional nameserver found. "A" query for www.ed448.no test skipped.

ADDRESS

Name server address must be globally routable (Address01)
All Nameserver addresses are in the routable public addressing space.
Reverse DNS entry exists for name server IP address (Address02)
Reverse DNS entry exists for each Nameserver IP address.
Reverse DNS entry matches name server name (Address03)
Every reverse DNS entry matches name server name.

CONNECTIVITY

UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns1.hyp.net/151.249.124.1
UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns1.hyp.net/2a01:5b40:ac1::1
UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns2.hyp.net/151.249.125.2
UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns2.hyp.net/2a01:5b40:ac2::1
UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns3.hyp.net/151.249.126.3
UDP connectivity (Connectivity01)
Connectivity:Connectivity01:NAMESERVER_HAS_UDP_53 ns=ns3.hyp.net/2a01:5b40:ac3::1
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns1.hyp.net/151.249.124.1
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns1.hyp.net/2a01:5b40:ac1::1
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns2.hyp.net/151.249.125.2
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns2.hyp.net/2a01:5b40:ac2::1
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns3.hyp.net/151.249.126.3
TCP connectivity (Connectivity02)
Connectivity:Connectivity02:NAMESERVER_HAS_TCP_53 ns=ns3.hyp.net/2a01:5b40:ac3::1

CONSISTENCY

SOA serial number consistency (Consistency01)
Saw SOA serial number 1611672687 on following nameserver set : ns1.hyp.net/151.249.124.1; ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/151.249.125.2; ns2.hyp.net/2a01:5b40:ac2::1; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1.
SOA serial number consistency (Consistency01)
A single SOA serial number was found (1611672687).
SOA RNAME consistency (Consistency02)
A single SOA rname value was found (hostmaster.domeneshop.no.).
SOA timers consistency (Consistency03)
A single SOA time parameter set was seen (REFRESH=21600, RETRY=3600, EXPIRE=1209600, MINIMUM=3600).
Name server NS consistency (Consistency04)
A single NS set was found (ns1.hyp.net.; ns2.hyp.net.; ns3.hyp.net.).
Consistency between glue and authoritative data (Consistency05)
Glue records are consistent between glue and authoritative data.
SOA MNAME consistency (Consistency06)
A single SOA mname value was seen (ns1.hyp.net.).

DELEGATION

Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers. Lower limit set to 2. Name servers: ns1.hyp.net; ns2.hyp.net; ns3.hyp.net
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers. Lower limit set to 2. Name servers: ns1.hyp.net; ns2.hyp.net; ns3.hyp.net
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers that resolve to IPv4 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/151.249.124.1; ns2.hyp.net/151.249.125.2; ns3.hyp.net/151.249.126.3
Minimum number of name servers (Delegation01)
Child lists enough (3) nameservers that resolve to IPv6 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/2a01:5b40:ac2::1; ns3.hyp.net/2a01:5b40:ac3::1
Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers that resolve to IPv4 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/151.249.124.1; ns2.hyp.net/151.249.125.2; ns3.hyp.net/151.249.126.3
Minimum number of name servers (Delegation01)
Delegation lists enough (3) nameservers that resolve to IPv6 addresses. Lower limit set to 2. Name servers: ns1.hyp.net/2a01:5b40:ac1::1; ns2.hyp.net/2a01:5b40:ac2::1; ns3.hyp.net/2a01:5b40:ac3::1
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers in parent are unique.
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers in child are unique.
Name servers must have distinct IP addresses (Delegation02)
All the IP addresses used by the nameservers are unique.
No truncation of referrals (Delegation03)
The smallest possible legal referral packet is smaller than 513 octets (it is 332).
Name server is authoritative (Delegation04)
All these nameservers are confirmed to be authoritative : ns1.hyp.net; ns2.hyp.net; ns3.hyp.net.
Name server must not point at CNAME alias (Delegation05)
No nameserver points to CNAME alias.
Existence of SOA (Delegation06)
All the nameservers have SOA record.
Parent glue name records present in child (Delegation07)
All of the nameserver names are listed both at parent and child.

DNSSEC

Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=i.nic.no/194.146.106.6; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=i.nic.no/194.146.106.6; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=i.nic.no/2001:67c:1010:1::53; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=i.nic.no/2001:67c:1010:1::53; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=njet.norid.no/156.154.101.12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=njet.norid.no/156.154.101.12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=not.norid.no/156.154.100.12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=not.norid.no/156.154.100.12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=not.norid.no/2001:502:ad09::12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=not.norid.no/2001:502:ad09::12; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=x.nic.no/128.39.8.40; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=x.nic.no/128.39.8.40; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=x.nic.no/2001:700:0:412f::40; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=x.nic.no/2001:700:0:412f::40; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=y.nic.no/193.75.4.22; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=y.nic.no/193.75.4.22; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=y.nic.no/2001:8c0:8200:1::2; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=y.nic.no/2001:8c0:8200:1::2; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=z.nic.no/158.38.8.133; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=z.nic.no/158.38.8.133; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-256; algorithm_number=2; keytag=44402; ns=z.nic.no/2001:700:0:52d:158:38:8:133; rrtype=DS; zone=ed448.no
Legal values for the DS hash digest algorithm (DNSSEC01)
DNSSEC:DNSSEC01:DS_ALGORITHM_OK algorithm_mnemonic=SHA-384; algorithm_number=4; keytag=44402; ns=z.nic.no/2001:700:0:52d:158:38:8:133; rrtype=DS; zone=ed448.no
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag {keytag} and covering type(s) DNSKEY expires at : Thu Feb 25 13:51:27 2021.
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag {keytag} and covering type(s) DNSKEY expires at : Thu Feb 25 13:51:27 2021.
Check for too short or too long RRSIG lifetimes (DNSSEC04)
RRSIG with keytag {keytag} and covering type(s) SOA expires at : Thu Feb 25 13:51:27 2021.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 44402 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Check for invalid DNSKEY algorithms (DNSSEC05)
The DNSKEY with tag 21981 uses algorithm number {algo_num} ({algo_descr}), which is OK.
Zone contains NSEC or NSEC3 records (DNSSEC10)
DNSSEC:DNSSEC10:HAS_NSEC3
DS in delegation requires signed zone (DNSSEC11)
DNSSEC:DNSSEC11:DELEGATION_SIGNED keytag=44402
All DNSKEY algorithms used to sign the zone (DNSSEC13)
DNSSEC:DNSSEC13:ALL_ALGO_SIGNED

NAMESERVER

A name server should not be a recursor (Nameserver01)
Nameserver ns3.hyp.net/2a01:5b40:ac3::1 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns2.hyp.net/2a01:5b40:ac2::1 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns2.hyp.net/151.249.125.2 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns1.hyp.net/151.249.124.1 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns3.hyp.net/151.249.126.3 is not a recursor.
A name server should not be a recursor (Nameserver01)
Nameserver ns1.hyp.net/2a01:5b40:ac1::1 is not a recursor.
Test of EDNS0 support (Nameserver02)
The following nameservers support EDNS0 : ns1.hyp.net/2a01:5b40:ac1::1; ns3.hyp.net/151.249.126.3; ns2.hyp.net/151.249.125.2; ns1.hyp.net/151.249.124.1; ns2.hyp.net/2a01:5b40:ac2::1; ns3.hyp.net/2a01:5b40:ac3::1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns1.hyp.net/151.249.124.1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns1.hyp.net/2a01:5b40:ac1::1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns2.hyp.net/151.249.125.2.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns2.hyp.net/2a01:5b40:ac2::1.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns3.hyp.net/151.249.126.3.
Test availability of zone transfer (AXFR) (Nameserver03)
AXFR not available on nameserver ns3.hyp.net/2a01:5b40:ac3::1.
Same source address (Nameserver04)
All nameservers reply with same IP used to query them.
Behaviour against AAAA query (Nameserver05)
The following nameservers answer AAAA queries without problems : ns1.hyp.net/151.249.124.1; ns2.hyp.net/151.249.125.2; ns2.hyp.net/2a01:5b40:ac2::1; ns1.hyp.net/2a01:5b40:ac1::1; ns3.hyp.net/151.249.126.3; ns3.hyp.net/2a01:5b40:ac3::1.
NS can be resolved (Nameserver06)
All nameservers succeeded to resolve to an IP address.
To check whether authoritative name servers return an upward referral (Nameserver07)
None of the following nameservers returns an upward referral : ns1.hyp.net; ns2.hyp.net; ns3.hyp.net.
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns1.hyp.net/151.249.124.1 preserves original case of queried names ({domain}).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns1.hyp.net/2a01:5b40:ac1::1 preserves original case of queried names ({domain}).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns2.hyp.net/151.249.125.2 preserves original case of queried names ({domain}).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns2.hyp.net/2a01:5b40:ac2::1 preserves original case of queried names ({domain}).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns3.hyp.net/151.249.126.3 preserves original case of queried names ({domain}).
Testing QNAME case insensitivity (Nameserver08)
Nameserver ns3.hyp.net/2a01:5b40:ac3::1 preserves original case of queried names ({domain}).
Testing QNAME case sensitivity (Nameserver09)
When asked for SOA records on "{domain}" with different cases, all servers reply consistently.

SYNTAX

No illegal characters in the domain name (Syntax01)
No illegal characters in the domain name ({domain}).
No hyphen ('-') at the start or end of the domain name (Syntax02)
Neither end of any label in the domain name ({domain}) has a hyphen.
There must be no double hyphen ('--') in position 3 and 4 of the domain name (Syntax03)
Domain name ({domain}) has no label with a double hyphen ('--') in position 3 and 4 (with a prefix which is not 'xn--').
The NS name must have a valid domain/hostname (Syntax04)
Nameserver ({domain}) syntax is valid.
The NS name must have a valid domain/hostname (Syntax04)
Nameserver ({domain}) syntax is valid.
The NS name must have a valid domain/hostname (Syntax04)
Nameserver ({domain}) syntax is valid.
Misuse of '@' character in the SOA RNAME field (Syntax05)
There is no misused '@' character in the SOA RNAME field (hostmaster.domeneshop.no.).
No illegal characters in the SOA RNAME field (Syntax06)
The SOA RNAME field (hostmaster@domeneshop.no) is compliant with RFC2822.
No illegal characters in the SOA MNAME field (Syntax07)
SOA MNAME ({domain}) syntax is valid.
MX name must have a valid hostname (Syntax08)
Domain name MX ({domain}) syntax is valid.

ZONE

Fully qualified master nameserver in SOA (Zone01)
Zone:Zone01:MNAME_IS_AUTHORITATIVE mname=ns1.hyp.net; zone=ed448.no
SOA 'refresh' minimum value (Zone02)
SOA 'refresh' value (21600) is at least equal to the minimum recommended value (14400).
SOA 'retry' lower than 'refresh' (Zone03)
SOA 'refresh' value (21600) is higher than the SOA 'retry' value (3600).
SOA 'retry' at least 1 hour (Zone04)
SOA 'retry' value (3600) is at least equal to the minimum recommended value (3600).
SOA 'expire' minimum value (Zone05)
SOA 'expire' value (1209600) is higher than the minimum recommended value (604800) and not lower than the 'refresh' value (21600).
SOA 'minimum' maximum value (Zone06)
SOA 'minimum' value (3600) is between the recommended ones (300/86400).
SOA master is not an alias (Zone07)
SOA 'mname' value (ns1.hyp.net) refers to a NS which is not an alias (CNAME).
SOA master is not an alias (Zone07)
SOA 'mname' value (ns1.hyp.net) refers to a NS which is not an alias (CNAME).
MX is not an alias (Zone08)
MX record for the domain is not pointing to a CNAME.
MX record present (Zone09)
Zone:Zone09:MX_RECORD_EXISTS info=MX=mx.domeneshop.no
No multiple SOA records (Zone10)
A unique SOA record is returned by all nameservers of the zone.

ed448.no

Former tests

ed448.no