DNS check Knowledge Base

SOA RNAME check

Prerequisites:

None.

Package:

Mail.

Executed on:

All nameserver IP addresses. (validating resolver for MX lookup).

Check interval:

Every 5 minutes.

Impact on Availability:

None.

Impact on Integrity:

None.

Purpose

The check validates that the SOA RNAME is consistent across all authoritative name servers and that the mail domain is valid.

The SOA RNAME (Responsible person name) field specifies the mailbox (email address) of the person or entity responsible for the zone. The email address is derived by replacing the first unescaped dot (.) with an at sign (@) as shown in the examples below.

The RNAME field support.example.com. is interpreted as the email address support@example.com.

The RNAME field support\.europe.example.com. is interpreted as the email address support.europe@example.com.

The RNAME mailbox is used to contact people responsible for a particular zone, for example, to alert them to a misbehaving DNS server.

Please note!

The check does not evaluate whether the actual mailbox is present and accepts mail on the target MTA, only that the MX records exist and can be resolved.

Event severities and messages

INFO

The response matches with the expected values. RNAME has MX records.
The RNAME values are identical across all authoritative name servers and the mail domain has resolvable MX records.

WARNING

Expected {RNAME}, got {response}.
SOA RNAME has changed since the zone was last configured for monitoring. If this is done on purpose please update the domain configuration by selecting the Reconfigure option in the Domain tab to update the monitoring database.

RNAME mail domain is missing MX records.
The mail address entered in the SOA RNAME field is not able to receive mail.

Solutions, tips & tricks

It is advisable to avoid personal mailboxes and instead use a functional mailbox such as support@example.com, dnsmaster@example.com or production@example.com. This way you are less likely to miss any mail relating to the DNS environment.