Three More Network Tools — and the Subnet Calculator Comes Home

The Network Tools section went live with four tools yesterday. Today it’s eight — plus a homecoming. Here’s what’s new:

Email Auth Lookup

SPF, DKIM, and DMARC, the three DNS records that decide whether your email gets delivered — checked live with plain verdicts. The tool counts your SPF lookup budget (the 10-lookup limit that silently breaks oversized records), flags multiple SPF records, shows your DMARC policy and reporting address, and hunts for DKIM keys across ten common selectors. If you run email for anything, run your domain through it. I tested it against my own company’s records before shipping, which is how I found out my DMARC was set to monitor-only. Fixing that.

URL Encoder

Percent-encoding both directions — strict mode for parameter values, URL-safe mode for whole addresses — with real error messages instead of crashes. The part I’m proud of is the punycode converter: it implements RFC 3492 from scratch, both directions, so you can turn münchen.de into xn--mnchen-3ya.de and back. If you’ve ever tried to figure out what a suspicious xn-- domain in a phishing email actually resolves to, this is that tool.

IP Range Expander

Point it at a CIDR and get the full range — network, broadcast, usable hosts, mask, wildcard. Point it at a first-to-last range and it hands back the minimal list of CIDR blocks that covers it, which is exactly the shape firewall rules and route summaries want. IPv4 and IPv6, with exact math on the 128-bit side.

The homecoming

The IPv4 Subnet Calculator moved out of the calculators section and into Network Tools, renamed to match its sibling. It sits right next to the IPv6 Subnet Calculator now, which is where it’s belonged all along — v4 and v6 of the same discipline shouldn’t live in different neighborhoods. The old address redirects, so nothing breaks.

Bonus: the IP tool went dual-stack

What Is My IP now shows your IPv4 and IPv6 addresses side by side, each with its own geolocation lookup, queried over each protocol separately. If your network has no IPv6 route, it says so in plain English instead of erroring at you.

That puts Network Tools at eight and the site at forty tools total. As always: no accounts, no tracking, everything runs on your device. Next batch is already in the queue.