[dns-operations] why does that domain resolve?

[Tony Finch]

Warren Kumari <warren at kumari.net> wrote:
>
> At the moment the main site that I'm recommending for this is IIS.SEs
> Zonemaster - https://zonemaster.iis.se/ and DNSViz.
>
> Zonemaster is really close, but I'd like a few other options as well.
> DNSViz is, of course, excellent for DNSSEC debugging, but it can be fairly
> confusing to less experienced people trying to debug non-DNSSEC issues.

There's also https://dnssec-analyzer.verisignlabs.com/ but it is also
mainly about DNSSEC.

(Worth noting that when you update a domain object in the RIPE database,
it uses Zonemaster to check that the new setup is cromulent.)

> So, what are people's favorite tools, especially those that you can just
> point a user at?

I wouldn't point a user at any of these unless I think they have a good
amount of DNS expertise :-)

In my work many of the difficult or time-consuming support issues are
related to domain registration rather than DNS, so I have Mixed Feelings
about the state of whois etc.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  https://dotat.at/
Bailey: Southwest becoming cyclonic, 5 to 7. Rough or very rough.
Showers. Good.