Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Every now and again I like to run checks on my DNS servers to make sure they are running right and to RFC spec. I used to use the DNSTools website to do this as it gave me a pretty good picture of what was going on - are all my servers responding to the outside world, and the important (NS, MX especially ) records still up and replicated right. Also to see if my MX records have managed to make it onto any blacklists.

Blacklists have always been kind of a pain as I haven't been able to find a reliable "one stop shop" that lets you check against most of the major blacklists out there.

I haven't used DNS tools in a while and now they are requiring you to pay (which I have nothing against, just hard to justify to the superiors when you have invested in a large internal monitoring solution and I'm just doing a "feel good check")

What do my fellow sysadmins uses to check on their DNS records?

share|improve this question
    
serverfault.com/questions/7489/… –  l0c0b0x Jul 13 '09 at 15:25
    
@l0c0b0x: My search foo must have been off i did search first. Although i'm still very interested in the Blacklist check part of my question. –  Zypher Jul 13 '09 at 15:57

7 Answers 7

up vote 4 down vote accepted

It's not like the old DNSStuff but http://www.iptools.com/ and http://www.mxtoolbox.com are good replacements.

share|improve this answer

I've found http://clez.net/net.dns to be good replacement has some other tools which are worth looking at too.

share|improve this answer
3  
intodns.com might also be worth looking at. –  Frenchie Jul 13 '09 at 15:14

I use zonecheck (http://www.zonecheck.fr/). It doesn't do everything that some paid DNS checking services do, but it does do many check, is both free and Free, and is available in many distros' standard repositories (see here and here for Debian/Lenny) so is relatively easy to install on your own internal services instead of relying on other sites.

share|improve this answer

What about intodns.com ? It's a really good site an provides a really good analysis of your DNS.

share|improve this answer

http://www.squish.net/dnscheck/ is what i used even before dnstools limited their services. it's really good, reports open recursive dns and possible misconfigurations straight from root dnses down to your server.

http://robtex.com/ has also some nice dns tool - mostly for checking blacklists, although this site is mainly useful for whois and bgp ASNs lookups.

share|improve this answer

I've used http://atrey.karlin.mff.cuni.cz/~mj/sleuth/ before. You can use the online form or download the program used to do the checks.

share|improve this answer
    
Does not work with IPv6 name servers (it spits a spurious error, saying they don't have A records). But its biggest problem is that it reports an error when the tested server is NOT recursive! A tool to avoid. –  bortzmeyer Jul 16 '09 at 12:17

There is a long list of current online DNS checking services (with explanations of why some are better than others) in my paper.

Executive summary: Zonecheck and DNScheck.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.