When I use DIG (or nslookup) from a command line to query DNS, it sometimes shows values that differ from what is displayed in the Agari portal.
The most frequent cause of this occurrence is a time delay between when the record is updated in DNS (and consequently propagated throughout the “cloud”) and when the Agari infrastructure pulls for changes. Changes are pulled every hour for Active Domains and once per day for Defensive Domains.
If entries are not showing in the portal, check the Time To Live (TTL) value on your DNS entries and ensure they are set to something reasonable based on the type of record. This value will cause DNS servers to refresh their cache at the given interval and reduce the time for your changes to be available to everyone worldwide. Remember that a relatively static environment (a DMARC record that rarely ever changes) need not have a value less than an hour (3600 seconds), or even 24 hours (86,400 seconds).
Please sign in to leave a comment.