DNS SOA NXDOMAIN Value

What you see when your domain has this problem
SOA NXDOMAIN Value too high Details area Ignore

More Information About Dns Soa Nxdomain Value

This value controls negative caching time which is how long a resolver will cache a NXDOMAIN Name Error. The maximum value allowed by RFC 2308 for this parameter is 24 hours (86400 seconds).

Additional Information

The NXDOMAIN Value is how long the system will provide a non-existent domain name response via caching in the event something such as a domain name registration expiration. This value is also helpful in preventing problems such as DNS hijacking of our domain controls.

RFC 2308:

Negative caching is useful as it reduces the response time for
negative answers.  It also reduces the number of messages that have
to be sent between resolvers and name servers hence overall network
traffic. [RFC2308]
The most common negative responses indicate that a particular RRset
does not exist in the DNS.  The first sections of this document deal
with this case.  Other negative responses can indicate failures of a
nameserver, those are dealt with in section 7 (Other Negative
Responses). [RFC2308]
As with caching positive responses it is sensible for a resolver to
limit for how long it will cache a negative response as the protocol
supports caching for up to 68 years.  Such a limit should not be
greater than that applied to positive answers and preferably be
tunable.  Values of one to three hours have been found to work well
and would make sensible a default.  Values exceeding one day have
been found to be problematic. [RFC2308]

This field was previously used as described by RFC 1035 as MINIMUM which was "The unsigned 32 bit minimum TTL field that should be exported with any RR from this zone."

DMARC is the key to improving Email Deliverability!

Email is the key to your customer communication strategy. But, what is your email reputation?

Setting up and managing your DMARC configuration is the key to getting insight into your email delivery. MxToolbox is the key to understanding DMARC.

MxToolbox Delivery Center gives you:

  • Who is sending phishing email purporting to be from your domain
  • What is the reputation of your domains and delegated IPs
  • Where other senders are and What their reputations are
  • How your SPF, DKIM and DMARC setup is performing
  • What on-going maintenance you need to maintain and improve your email deliverability

  Learn More

burritos@banana-pancakes.com braunstrowman@banana-pancakes.com finnbalor@banana-pancakes.com ricflair@banana-pancakes.com randysavage@banana-pancakes.com