Update rules

This commit is contained in:
nemunaire 2026-04-30 08:35:11 +07:00
commit 5acf464d4e

View file

@ -80,19 +80,18 @@ it directly to the public internet.
## Rules ## Rules
Results from Zonemaster are split per test module into one happyDomain rule Each rule wraps one Zonemaster test module and emits a `<rule>.summary`
each. Every rule emits a `<rule>.summary` state with aggregate counts, plus state plus one `<rule>.<level>` state per WARNING-or-worse Zonemaster
one `<rule>.<level>` state per WARNING-or-worse Zonemaster message (so message, so downstream consumers can match on stable codes.
downstream consumers can match on stable codes).
| Rule | Modules | Description | | Code | Description | Severity |
|---------------------------|----------------|-----------------------------------------------------------------------------------| |---------------------------|-----------------------------------------------------------------------------------|----------|
| `zonemaster.dnssec` | `dnssec` | DNSSEC tests (signatures, NSEC/NSEC3, DS/DNSKEY coherence). | | `zonemaster.dnssec` | DNSSEC tests (signatures, NSEC/NSEC3, DS/DNSKEY coherence). | CRITICAL |
| `zonemaster.delegation` | `delegation` | Delegation tests (parent/child NS agreement, glue, referrals). | | `zonemaster.delegation` | Delegation tests (parent/child NS agreement, glue, referrals). | CRITICAL |
| `zonemaster.consistency` | `consistency` | Consistency tests (SOA serial, NS set, zone content across servers). | | `zonemaster.consistency` | Consistency tests (SOA serial, NS set, zone content across servers). | CRITICAL |
| `zonemaster.connectivity` | `connectivity` | Connectivity tests (UDP/TCP reachability of authoritative servers, AS diversity). | | `zonemaster.connectivity` | Connectivity tests (UDP/TCP reachability of authoritative servers, AS diversity). | CRITICAL |
| `zonemaster.nameserver` | `nameserver` | Nameserver tests (server behaviour, EDNS, unknown RR handling). | | `zonemaster.nameserver` | Nameserver tests (server behaviour, EDNS, unknown RR handling). | CRITICAL |
| `zonemaster.syntax` | `syntax` | Syntax tests (domain name syntax, hostname legality). | | `zonemaster.syntax` | Syntax tests (domain name syntax, hostname legality). | CRITICAL |
## License ## License