DNS Report Errors: 1) Open DNS servers 2) Missing (stealth) nameservers

3) Missing nameservers 4) Single Point of Failure 5) Stealth NS record leakage

[Jon_King]

I recently changed hosting companies (as mentioned in previous posts) and just ran a DNS report for a particular domain.

I receive these errors:

1) Open DNS servers
2) Missing (stealth) nameservers
3) Missing nameservers 2
4) Single Point of Failure
5) Stealth NS record leakage

I have done some looking around in the tutor posts here but I think these issues are out of my control? I am unsure of their seriousness and how to correct them if needed. Your help will be appreciated.

[jtara]

Without more details, it's hard to say if these are beyond your control or not.

What kind of hosting account do you have? If it's a VPS, you are probably running an instance of a DNS server in your VPS, and this would be completely within your control.

If not, it is probably a common DNS server at your host. In the latter case, I would certainly re-evaluate your selection of host, as they appear to be clueless.

In either case, the remedy would be third-party DNS or else use the free DNS offered by your registrar (if your registrar offers this).

Open DNS could be a serious problem that could affect your site's reputation, getting it put on black-hole lists, etc.

The other problems are less serious, but are getting in the way of reliable DNS service. You are required to have at least two DNS servers. Spoofing things so that one DNS server appears to be two different ones doesn't meet the technical requirement, and in any case reduces reliability.

[Jon_King]

Yes it is a common DNS server at my host.

This is a new host for us. Their response was that these were minor issues from an overly detailed/sensitive reporting service and I didn't need concern myself.

You certainly set off alarms with your Open Server observation.

I just moved a group of sites to this host... and that was no small job. Any thoughts on getting them to right the issues or do you think to bail on them?

[jtara]

Their response was that these were minor issues from an overly detailed/sensitive reporting service and I didn't need concern myself.

Red flag. While dnsreports can be picayune, the particular problems noted are not minor.

I just moved a group of sites to this host... and that was no small job. Any thoughts on getting them to right the issues or do you think to bail on them?

Again, the DNS issue is easy to fix - go with third-party DNS or DNS from your registrar.

I'd watch them carefully to see if they are as unconcerned about other problems, though.