The SOA minimum (negative caching TTL) is longer than three hours.

SOA_NEGATIVE_TTL_LONG · Severity: Info

• InfoSOA_NEGATIVE_TTL_LONG

  The SOA minimum (negative caching TTL) is longer than three hours.

  Resolvers cache a missing name or record for this long (RFC 2308). RFC 2308 section 5 suggests one to three hours, so a newly added name becomes visible soon.

Reported by

• SOA record check
• Zone file checker

Available through the API

• SOA record check API
• Zone file checker API

Related findings

• Info SOA_NOT_FOUND The name has no SOA record, so it is not the apex of a zone.
• Warning SOA_EXPIRE_BELOW_REFRESH The SOA expire is not longer than refresh plus retry.
• Info SOA_EXPIRE_SHORT The SOA expire is shorter than two weeks.
• Info SOA_REFRESH_OUT_OF_RANGE The SOA refresh is outside 20 minutes to 12 hours.
• Warning SOA_RETRY_NOT_BELOW_REFRESH The SOA retry is not shorter than the refresh.
• Info SOA_SERIAL_NOT_DATE The SOA serial is not in the YYYYMMDDnn date form.

All findings