Getting started
What Estate health is telling you
How does DNSMentor score domain health?
Estate health scores every domain you manage against mail authentication, delegation, TTL sanity, certificate authority records and open incidents, then sorts worst first. It is the fastest way to find out what is actually wrong across an estate you have inherited.
# What it looks at
- Mail authentication — SPF present and singular, DKIM published, DMARC present and past p=none.
- Delegation — nameservers resolve, glue is correct, nothing points at a provider you left.
- TTL — values sane for the record type, and nothing left at 60 seconds since a migration two years ago.
- CAA — certificate issuance restricted to the authority you actually use.
- Open incidents and monitoring failures against that domain.
# Use it on day one
On a newly imported estate it usually finds several domains with no SPF at all, a DMARC record stuck on p=none since somebody set it up years ago, and at least one delegation pointing at a provider the client left. That list is also a very good conversation with the client about what they are paying you for.
Thanks — noted.
Related
Raise a ticket from inside the platform and your tenant, plan and recent activity come attached automatically. A client currently offline is treated as urgent on every plan.