cloudguy2899/dns-zone-audit repository overview

⁠DNS Zone Auditor

A professional, self-hosted web tool for auditing DNS zones. Paste subdomains, URLs, or BIND-format zone files, and the tool resolves each record type (A, AAAA, CNAME, MX, TXT), checks live HTTP/SMTP health, inspects SSL certificates, and scans for open ports.

⁠🚀 Key Features

• Multi-Record Detection — Automatic detection of A, AAAA, CNAME, MX, and TXT records.
• Live Health Monitoring — Verifies activity with per-URL HTTP status codes or SMTP connectivity (Port 25).
• SSL/TLS Insights — One-click inspection of certificate expiry, issuer, and days remaining.
• Port Scanning — Integrated scanner for common services and ICMP ping status.
• DMARC/SPF Analysis — Identifies dangerous SPF +all flags and verifies DMARC record presence.
• BIND Integration — Directly parse BIND zone files to audit existing infrastructure.
• Streaming Results — Row-by-row real-time auditing as data is processed.
• CSV Export — Download full audit datasets for offline analysis.
• Modern Dark UI — Responsive interface with zero external CSS/JS dependencies.

⁠⚡ Quick Start

⁠Docker Run

docker run -d \
  --name dns-zone-audit \
  -p 8000:8000 \
  cloudguy2899/dns-zone-audit:latest

Then open http://localhost:8000⁠ in your browser.

⁠Docker Compose

Save this as docker-compose.yml and run docker compose up -d:

version: "3.9"
services:
  dns-zone-audit:
    image: cloudguy2899/dns-zone-audit:latest
    container_name: dns-zone-audit
    restart: unless-stopped
    ports:
      - "8000:8000"

⁠⚙️ Configuration

⁠🛠️ Performance & Recommendations

• Bulk Auditing: For lists larger than 500 records, consider running the container with additional memory if the host is constrained.
• Network Access: Ensure the container has outbound access to Port 80, 443, and 25 for full health check functionality.

⁠🏗️ Supported Architectures

⁠📦 Tags