cenpac.net.nr — Pacific Islands IPv6 Monitor

Score2/4

Overall IPv4-only

Collected2026-10-13 00:32 UTC

Measurement estimates from a single vantage point — not a compliance certification. Guidance below is for operators, not an SLA.

Priority next steps

Publish AAAA records for name server: ns0.cenpac.net.nr, ns1.cenpac.net.nr.
IPv6 2403:f600:0:225::13 on mail (MX) mail.nr failed (timeout) — check firewall, routing, and service.
Enable DNSSEC signing and publish a DNSKEY at the apex. Use DNSViz to validate the full chain.
Publish a _dmarc TXT record (start with p=none, then tighten). Check policy on dmarcian.

Dual-stack

[3] 1/1/1 [I]

Meaning: Shows how many authoritative name servers exist, and how many IPv6 endpoints are configured, responsive, and operational.

IPv4 3/3/3 · IPv6 1/1/1 · location I

Host	IPv4	IPv6	Probes
`ns0.cenpac.net.nr` [I]	203.98.224.66	—	ipv4 203.98.224.66 ok;
`ns1.cenpac.net.nr` [I]	203.98.225.9	—	ipv4 203.98.225.9 ok;
`ns2.cenpac.net.nr` [I]	202.144.128.200	2405:d000:0:100::200	ipv4 202.144.128.200 ok; ipv6 2405:d000:0:100::200 ok;

📌 Action item(s):

IPv4-only

[1 MX] v4 smtp 1/1/1 v6 smtp 1/1/0 [O]

Meaning: Shows MX footprint and SMTP health per IP family. Operational means an SMTP banner and EHLO exchange succeeded on port 25.

IPv4 SMTP 1/1/1 · IPv6 1/1/0 · location O

Host	IPv4	IPv6	Probes
`mail.nr` [O]	203.98.225.13	2403:f600:0:225::13	ipv4 203.98.225.13 ok; ipv6 2403:f600:0:225::13 timeout;

📌 Action item(s):

IPv6 2403:f600:0:225::13 on mail (MX) mail.nr failed (timeout) — check firewall, routing, and service.

Dual-stack

[1] 1/1/1 [I]

Meaning: Shows IPv6 web endpoint readiness for the discovered HTTPS host. Operational means family-specific HTTPS requests complete successfully.

IPv4 1/1/1 · IPv6 1/1/1 · location I

Host	IPv4	IPv6	Probes
`www.cenpac.net.nr` [I]	203.98.224.68	2403:f600:0:224::68	ipv4 ok; ipv6 ok;

Unsigned

U/-/-

Meaning: Shows whether DNSKEY data is observed at the apex (signed), absent (unsigned), or unavailable due to lookup error.

Apex DNSKEY presence only — not full chain validation.

📌 Action item(s):

Enable DNSSEC signing and publish a DNSKEY at the apex. Use DNSViz to validate the full chain.

No record

No record — no TXT at _dmarc.cenpac.net.nr.

Meaning: Published DMARC policy at _dmarc.cenpac.net.nr (DNS TXT). Shows organizational policy (p=) and subdomain policy (sp=) when set.

Publish a DMARC TXT at _dmarc.cenpac.net.nr (often start with p=none, then tighten).

Policy publication only — SPF/DKIM not measured. Not part of the 0–4 row score.

📌 Action item(s):

Publish a _dmarc TXT record (start with p=none, then tighten). Check policy on dmarcian.