Everything is a Freaking DNS problem

In my latest DNS Problem related post I mentionned that don't know all the answers, I however know about some good tools to help you setup a clean DNS server.

Ages ago via Planet Fedora I ran into an article from Steven Moix about a tool he and his fellow students build for a summer project.

The tool is DNSKnife and it's really interresting.

DNS Knife is a good tool to check if your DNS setup is ok, it checks the parent servers, it checks for if your nameservers are listed on the parent server, checks if all your nameservers are reachable and are authorative .
And so on and so on ...

It warns for Open Relays, if you care for that ..in fact an Open DNS relay also means that you can use it from everywhere eg for tcp over dns.

It warns for misconfigured SOA , such as too short Expire values etc
You know.. the time a secondary dns server will keep it's copy of the zone valid when It can't contact the primary , not the other misinterpretations you folks usually have ..

Off course it isn't always correct. it considers not finding MX records a failur
e , however some domains just don't want a MX record.

DNSKnife actually provides you with an automated alternative to manually verify ing RFC 1912 , well at least partly :)