The public resolvers give different response codes for the same question.

DNS_RCODES_DIFFER · Severity: Warning

• WarningDNS_RCODES_DIFFER

  The public resolvers give different response codes for the same question.

  One resolver answered differently from another, for example NOERROR against SERVFAIL or NXDOMAIN. A SERVFAIL on one side often means a DNSSEC problem that only the validating resolver sees; NXDOMAIN against NOERROR often means a change that has not reached every cache yet. The evidence lists the codes.

  Recommendation: Repeat the check after the TTL; if it persists, check DNSSEC.

Reported by

• DNS resolver comparison

Available through the API

• DNS resolver comparison API

Related findings

• Warning DNS_RESOLVER_FAILURE The DNS resolver returned a server failure.
• Warning DNS_RESOLVER_TIMEOUT The DNS resolver did not answer in time.
• Info DNS_ANSWERS_DIFFER The public resolvers return different records for the same question.
• Error DNS_DOMAIN_NOT_FOUND The DNS resolver reported that the domain does not exist.

All findings