The SOA expire is not longer than refresh plus retry.

SOA_EXPIRE_BELOW_REFRESH · Severity: Warning

• WarningSOA_EXPIRE_BELOW_REFRESH

  The SOA expire is not longer than refresh plus retry.

  Secondaries stop answering for the zone after expire seconds without a successful refresh. An expire this short can make them drop the zone before the first retry.

  Recommendation: Set expire to two weeks or more, for example 1209600.

Reported by

• SOA record check
• Zone file checker

Available through the API

• SOA record check API
• Zone file checker API

Related findings

• Info SOA_EXPIRE_SHORT The SOA expire is shorter than two weeks.
• Info SOA_NEGATIVE_TTL_LONG The SOA minimum (negative caching TTL) is longer than three hours.
• Info SOA_NOT_FOUND The name has no SOA record, so it is not the apex of a zone.
• Info SOA_REFRESH_OUT_OF_RANGE The SOA refresh is outside 20 minutes to 12 hours.
• Warning SOA_RETRY_NOT_BELOW_REFRESH The SOA retry is not shorter than the refresh.
• Info SOA_SERIAL_NOT_DATE The SOA serial is not in the YYYYMMDDnn date form.

All findings