Zone
The domain (ie: zone) that should be tested (ie: the domain name
that you want to register).
Primary
The nameserver that is considered as primary (the one in
the SOA record if it is public).
Secondary
The secondary nameservers (all the NS records associated
with the zone, except for the one listed above).
IPs
List of IP addresses associated with the nameserver.
- they are only required if they can't be resolved
(ie: they are in the zone that you want to register).
- if you have several addresses you must use a space or
a comma as the separator.
- the form accepts IPv4 and IPv6 addresses.
zone summary
Includes a summary about the zone and its nameservers in
the generated report
test name
Includes the name of the test that has been performed
when reporting errors
explanations
Includes an explanation (when the test failed) about
the purpose of the test and why you should fix it.
details
Includes details (when the test failed) about
the culprit elements.
progress bar
Display information about the test progression
using a a progress bar (require javascript and
Mozilla or IE5+ for correct rendering).
description
Give a short description of the test when it is performed.
nothing
Don't display information about the test progression.
report
Select the type of generated report you want.
format
Select the format in which you want the report
(HTML or plain text).
language
Select the language that you want the report generated in.
default error
Errors are reported with the default severity associated
with them.
all fatals
All errors are considered fatals.
all warnings
All errors are considered warnings.
don't stop on fatal
Keep going even after encountering a fatal error
(this could lead to some unexpected results).
report ok
Report test that passed.
Options: Extra tests performed
mail delivery
Perform extra checking on mail delivery for typical
mail accounts (hostmaster, postmaster, ...) associated with
domain names.
zone transfer
Perform additional tests on the zone retrieved after
a zone transfer.
RIR databases
Check that IP addresses used are registered in the RIR
databases
IPv4, IPv6
Select the routing layer (if none are selected it will
default to IPv4 and IPv6).
STD, UDP, TCP
Select the transport layer you want for interrogating
your nameservers.
DNSSEC tests
Set the DNSSEC tests policy to mandatory, if not tests will be warnings
DS and Hash Algorithm
Gives the hash of the public key and the algorithm used to do that
The hash of the key must be encoded in hexadecimal (blanks are removed).
The Hash Algorithm is the number given by IANA and corresponding to the algorithm.
DNSKEY
Gives the public key used as a Security Entry Point.
The key must be encoded in base64 (blanks will be removed).
The time required to completely verify a zone can take from 30 seconds up to 5 minutes depending on the network speed of the server being accessed. If it takes more than a minute it generally means we are encountering problems accessing your nameservers (configuration error, firewall, ...) and are waiting for timeout.