DNS Zone Validator
What's checked
Supported record types: SOA, NS, MX, A, AAAA, TXT, CNAME, CAA, SRV, PTR —
each validated against its real RDATA format (an MX record needs a numeric priority and a
hostname; an AAAA record's address is checked as real IPv6, including ::
zero-compression; a CAA record's flags must be 0–255). Other record types are parsed and
listed but not deeply validated. Checks: missing SOA, invalid serial number (must be a valid
unsigned 32-bit integer), duplicate records (identical name+type+data), TTL inconsistency
within an RRset (RFC 2181 expects every record in the same name+type group to share a TTL),
invalid hostnames (label length, allowed characters), and directives this validator doesn't
implement ($INCLUDE, $GENERATE — flagged honestly rather than
silently ignored or faked).