This article explains how to use Web60's DNS Health Report tool to check your domain's DNS configuration and fix common issues.
What the DNS Health Report checks
The DNS Health Report at web60.ie/tools/dns-health tests 14 different aspects of your domain's DNS setup. It gives you a score out of 100, where each check can earn 1 point (pass), 0.5 points (warning), or 0 points (fail).
The tool checks two main areas:
Nameserver checks: These verify your domain's basic DNS infrastructure, including whether you have enough nameservers, if they're reachable, and if key settings like refresh and expiry times are configured properly.
Domain record checks: These look for essential records like your website address (A record), email routing (MX records), spam protection (SPF), and email security (DMARC).
How to run the DNS health check
- Go to web60.ie/tools/dns-health in your web browser
- Enter your domain name (for example, yourbusiness.ie)
- Click the check button
- Wait for the results to load
The tool will show you a detailed report with your overall score and individual results for each check. Green results are good, yellow warnings need attention, and red failures should be fixed.
Common issues and how to fix them
No MX records found: Your domain cannot receive emails. Add MX records through your domain registrar or DNS provider to fix this.
No SPF record present: Without SPF records, emails from your domain may be marked as spam. Add an SPF TXT record to your DNS settings.
SPF policy too weak: If your SPF record ends with ~all instead of -all, change it to -all for stronger spam protection. The ~all setting only gives a warning, while -all provides a hard fail for unauthorised senders.
No DMARC record: DMARC helps protect your domain from email spoofing. Add a _dmarc TXT record to improve email security.
When to use this tool
Run the DNS Health Report after you've finished setting up your domain's DNS configuration. This is especially useful when you've connected your domain to Web60 or made changes to your email settings.
The tool is also helpful for diagnosing problems if your domain isn't working properly or if you're having email delivery issues.
Aim for a score of 100/100, though some warnings (like SOA serial format) are informational and don't affect your domain's functionality.
If you're still stuck with DNS issues after using this tool, contact Web60 support for help with your domain configuration.
Frequently asked questions
What's a good score on the DNS Health Report?
Aim for 100/100. Anything above 90 is generally fine, but you should fix any red failures as these indicate serious problems.
Why does my domain show warnings for SOA serial format?
This is informational only. Some DNS providers don't use the YYYYMMDDNN date format for SOA serials, but this doesn't affect how your domain works.
How long should I wait after making DNS changes before running the check?
DNS changes can take up to 48 hours to fully propagate. Wait at least 2-4 hours after making changes before running the health check.
What's the difference between SPF ~all and -all?
The -all setting provides stronger spam protection by completely rejecting unauthorised emails, while ~all only marks them as suspicious.
Can I use this tool for domains not hosted with Web60?
Yes, this is a free public tool that works with any domain name, regardless of where it's hosted or registered.
What should I do if my nameservers are unreachable?
Contact your DNS provider or domain registrar. Unreachable nameservers mean your domain won't work properly for websites or email.
Last updated: 26 March 2026