ZONE07: SOA master is not an alias
Test case identifier
ZONE07 SOA master is not an alias
Objective
Any NS type record should not be a CNAME. The SOA MNAME should in this respect not be a CNAME.
Quote from 2.4 in RFC 1912:
Having NS records pointing to a CNAME is bad and may conflict badly with current BIND servers.
The SOA MNAME field is described in section 3.3.13 in RFC 1035.
The RIPE-203 recommendation for the minimum value 2 days, but the negative caching is now the norm. DNSCheck has a recommended value of between 300 seconds (5 minutes) and 86400 seconds (1 day).
Inputs
The domain name to be tested.
Ordered description of steps to be taken to execute the test case
- Retrieve the SOA record from a delegated name server for the domain.
- If the answer from step 1 is not authoritative, iterate step 1 until there is an authoritative answer.
- Retrieve the SOA MNAME value from the SOA record.
- Query for A and AAAA records for the host from MNAME.
- If the answer to the query is a CNAME, this test case fails.
Outcome(s)
If the SOA MNAME field is pointing to a CNAME, this test case fails.
Special procedural requirements
None.
Intercase dependencies
None.