At 53udp.com you will find a nice little DNS zone validation tool (thank you ZoneCheck). I dropped the priority on a few checks from “fail” to “warn”
– a lack TCP services on the DNS server is not necessarily a failure of the system
– a mismatch of serial numbers likely means nothing when using tinydns’ default file timestamp serial numbers
– can’t send email to the hostmaster address in the SOA record? ok, fine, but not a total failure
Happy queries!