1
<?xml version='1.0' encoding='UTF-8'?>
2
<!DOCTYPE config PUBLIC "-//ZoneCheck//DTD Config V1.0//EN" "msgcat.dtd">
4
<!-- $Id: soa.en,v 1.28 2003/12/18 15:55:50 sdalu Exp $ -->
8
# CONTACT : zonecheck@nic.fr
9
# AUTHOR : Stephane D'Alu <sdalu@nic.fr>
11
# CREATED : 2002/08/02 13:58:17
12
# REVISION : $Revision: 1.28 $
13
# DATE : $Date: 2003/12/18 15:55:50 $
15
# CONTRIBUTORS: (see also CREDITS file)
18
# LICENSE : GPL v2 (or MIT/X11-like after agreement)
19
# COPYRIGHT : AFNIC (c) 2003
21
# This file is part of ZoneCheck.
23
# ZoneCheck is free software; you can redistribute it and/or modify it
24
# under the terms of the GNU General Public License as published by
25
# the Free Software Foundation; either version 2 of the License, or
26
# (at your option) any later version.
28
# ZoneCheck is distributed in the hope that it will be useful, but
29
# WITHOUT ANY WARRANTY; without even the implied warranty of
30
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
31
# General Public License for more details.
33
# You should have received a copy of the GNU General Public License
34
# along with ZoneCheck; if not, write to the Free Software Foundation,
35
# Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
41
<explanation name="email_sntx">
42
<src type="ref" from="rfc" fid="rfc1034#p9">
43
<title>IETF RFC1034 (p.9), RFC1912 (p.3)</title>
44
<para>Email addresses are converted by using the following rule:
45
local-part@mail-domain ==> local-part.mail-domain
46
if local-part contains a dot in should be backslashed
50
<explanation name="soa_local_policy">
52
<title><zcconst name="registry"/> registry policy</title>
53
<para>The registry requieres the SOA fields to be inside
54
a defined range: the 'expire' should be between
55
<zcconst name="soa:expire:min" display="duration"/> and
56
<zcconst name="soa:expire:max" display="duration"/>,
58
<zcconst name="soa:minimum:min" display="duration"/> and
59
<zcconst name="soa:minimum:max" display="duration"/>,
61
<zcconst name="soa:refresh:min" display="duration"/> and
62
<zcconst name="soa:refresh:max" display="duration"/>,
63
and at last the 'retry' between
64
<zcconst name="soa:retry:min" display="duration"/> and
65
<zcconst name="soa:retry:max" display="duration"/>.</para>
73
<name>SOA record present</name>
74
<success>SOA record found</success>
75
<failure>No SOA record found on server</failure>
81
<check name="soa_auth">
82
<name>SOA authoritative answer</name>
83
<success>The SOA answer is authoritative</success>
84
<failure>The SOA answer is not authoritative</failure>
90
<check name="soa_contact_sntx_at">
91
<name>misused '@' characters in SOA contact name</name>
92
<success>No misuse of '@' character in SOA contact name</success>
93
<failure>The contact name contains the character '@'</failure>
94
<explanation sameas="shortcut:email_sntx"/>
99
<check name="soa_contact_sntx">
100
<name>illegal characters in SOA contact name</name>
101
<success>No illegal characters in SOA contact name</success>
102
<failure>The contact name contains illegal characters</failure>
103
<explanation sameas="shortcut:email_sntx"/>
108
<check name="soa_master_sntx">
109
<name>illegal characters in SOA master nameserver</name>
110
<success>No illegal characters in SOA master nameserver</success>
111
<failure>The SOA master nameserver contains illegal characters</failure>
112
<explanation sameas="shortcut:label"/>
117
<check name="soa_master_fq">
118
<name>fully qualified master nameserver in SOA</name>
119
<success>The SOA master nameserver is fully qualified</success>
120
<failure>The SOA master nameserver is not fully qualified</failure>
122
<details><para>The master nameserver (<zcvar name="mname"/>) is
123
certainly missing the final dot in the configuration file.</para></details>
127
<check name="soa_serial_fmt_YYYYMMDDnn">
128
<name>serial number of the form YYYYMMDDnn</name>
129
<success>The serial number follows the form YYYYMMDDnn</success>
130
<failure>The format of the serial number is not YYYYMMDDnn</failure>
132
<src type="ref" from="rfc" fid="rfc1912#p3">
133
<title>RFC1912 (p.3)</title>
134
<para>The recommended syntax is YYYYMMDDnn (YYYY=year, MM=month,
135
DD=day, nn=revision number).</para>
138
<details><para>The serial <zcvar name="serial"/> doesn't seem to be
139
in the YYYYMMDDnn format.</para></details>
143
<check name="soa_expire">
144
<name>SOA 'expire' between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></name>
145
<success>The 'expire' is between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></success>
146
<failure>The 'expire' period should be between <zcconst name="soa:expire:min" display="duration"/> and <zcconst name="soa:expire:max" display="duration"/></failure>
147
<explanation sameas="shortcut:soa_local_policy"/>
148
<details><para>The expire value is
149
<zcvar name="expire" display="duration"/> and should be between
150
<zcconst name="soa:expire:min" display="duration"/> and
151
<zcconst name="soa:expire:max" display="duration"/>.</para></details>
155
<check name="soa_minimum">
156
<name>SOA 'minimum' between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></name>
157
<success>The 'minimum' is between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></success>
158
<failure>The 'minimum' period should be between <zcconst name="soa:minimum:min" display="duration"/> and <zcconst name="soa:minimum:max" display="duration"/></failure>
159
<explanation sameas="shortcut:soa_local_policy"/>
160
<details><para>The minimum value is
161
<zcvar name="minimum" display="duration"/> and should be between
162
<zcconst name="soa:minimum:min" display="duration"/> and
163
<zcconst name="soa:minimum:max" display="duration"/>.</para></details>
167
<check name="soa_refresh">
168
<name>SOA 'refresh' between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></name>
169
<success>The 'refresh' is between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></success>
170
<failure>The 'refresh' period should be between <zcconst name="soa:refresh:min" display="duration"/> and <zcconst name="soa:refresh:max" display="duration"/></failure>
171
<explanation sameas="shortcut:soa_local_policy"/>
172
<details><para>The refresh value is
173
<zcvar name="refresh" display="duration"/> and should be between
174
<zcconst name="soa:refresh:min" display="duration"/> and
175
<zcconst name="soa:refresh:max" display="duration"/>.</para></details>
179
<check name="soa_retry">
180
<name>SOA 'retry' between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></name>
181
<success>The 'retry' is between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></success>
182
<failure>The 'retry' period should be between <zcconst name="soa:retry:min" display="duration"/> and <zcconst name="soa:retry:max" display="duration"/></failure>
183
<explanation sameas="shortcut:soa_local_policy"/>
184
<details><para>The retry value is
185
<zcvar name="retry" display="duration"/> and should be between
186
<zcconst name="soa:retry:min" display="duration"/> and
187
<zcconst name="soa:retry:max" display="duration"/>.</para></details>
191
<check name="soa_retry_refresh">
192
<name>SOA 'retry' lower than 'refresh'</name>
193
<success>The 'retry' is lower than the 'refresh'</success>
194
<failure>The 'retry' period must be lower than the 'refresh' period</failure>
196
<src type="ref" from="rfc" fid="rfc1912#p4">
197
<title>IETF RFC1912 (p.4)</title>
198
<para>The 'retry' value is typically a fraction of the
199
'refresh' interval.</para>
202
<details><para>The retry (<zcvar name="retry"/> sec) should be lower
203
than the refresh (<zcvar name="refresh"/> sec).</para></details>
207
<check name="soa_expire_7refresh">
208
<name>SOA 'expire' at least 7 times 'refresh'</name>
209
<success>The 'expire' is at least 7 times the 'refresh'</success>
210
<failure>The 'expire' period must be at least 7 times greater than 'refresh'</failure>
212
<details><para>The expire (<zcvar name="expire"/> sec) is not at
213
least 7 times greater than the refresh (<zcvar name="refresh"/> sec),
214
you should correct one of them.</para></details>
218
<check name="soa_ns_cname">
219
<name>SOA master is not an alias</name>
220
<success>The SOA master is not an alias</success>
221
<failure>SOA master is not allowed to point to a CNAME alias</failure>
222
<explanation sameas="shortcut:ns_cname"/>
223
<details><para>The master (<zcvar name="master"/>) is a CNAME alias
224
to <zcvar name="alias"/>.</para></details>
228
<check name="soa_vs_any">
229
<name>coherence between SOA and ANY records</name>
230
<success>SOA and ANY agree</success>
231
<failure>SOA and ANY request disagree</failure>
237
<check name="soa_coherence_serial">
238
<name>coherence of serial number with primary nameserver</name>
239
<success>The serial number is consistent with primary nameserver</success>
240
<failure>The serial number is not consistent with primary nameserver</failure>
242
<details><para>got serial <zcvar name="serial_this"/> instead of
243
<zcvar name="serial_ref"/> as on <zcvar name="host_ref"/>.</para></details>
247
<check name="soa_coherence_contact">
248
<name>coherence of administrative contact with primary nameserver</name>
249
<success>The contact is consistent with primary nameserver</success>
250
<failure>The contact is not consistent with primary nameserver</failure>
252
<details><para>got contact <zcvar name="rname_this"/> instead of
253
<zcvar name="rname_ref"/> as on <zcvar name="host_ref"/>.</para></details>
257
<check name="soa_coherence_master">
258
<name>coherence of master with primary nameserver</name>
259
<success>The master is consistent with primary nameserver</success>
260
<failure>The master is not consistent with primary nameserver</failure>
262
<details><para>Got master <zcvar name="mname_this"/> instead of
263
<zcvar name="mname_ref"/> as on <zcvar name="host_ref"/>.</para></details>
267
<check name="soa_coherence">
268
<name>coherence of SOA with primary nameserver</name>
269
<success>The SOA is consistent with primary nameserver</success>
270
<failure>The SAO is not consistent with primary nameserver</failure>
275
<!-- Local Variables: -->