Unsorted ideas:
~~~~~~~~~~~~~~~
- check whether different nameservers are in different networks
- check both TCP and UDP queries
- SOA admin address: wildcard MX record?
- IPv6 records and reversals
- detailed host/mail/domain name checks
- cgi: memory limits?