Subdomains? AXFR?

[Kevin Darcy]

If the servers don't permit you to do zone transfers, then the only other
choice is to query every *possible* name under the domain, which is obviously
not practical.


- Kevin

Robert Schultz wrote:

> I'd like a list of all 'sub-domains' available on any given 'major' domain.
> For example, ign.com has several domains. pc.ign.com, xbox.ign.com,
> psx.ign.com, pocket.ign.com, etc.
> The DNS servers have got to know what subdomain's are available.
>
> I think an AXFR query is what i'm after.
> Although I haven't gotten it to work.
> The most I get is:
>
> [user at box]$ host -l -v -t any ign.com
> rcode = 0 (Success), ancount=3
> Found 1 addresses for NS1.AFFILIATION.com
> Found 1 addresses for NS4.SNOWBALL.com
> Found 1 addresses for NS3.SNOWBALL.com
> Trying 64.41.179.155
> Server failed, trying next server: Query refused
> Trying 64.41.179.249
> Server failed, trying next server: Query refused
> Trying 64.41.179.204
> Server failed: Query refused
>
> [user at box]$ dig soa +norec ign.com ns3.snowball.com
>
> ; <<>> DiG 2.2 <<>> soa +norec ign.com ns3.snowball.com
> ;; res options: init defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr ra; Ques: 1, Ans: 0, Auth: 2, Addit: 2
> ;; QUESTIONS:
> ;;      ns3.snowball.com, type = SOA, class = IN
>
> ;; AUTHORITY RECORDS:
> SNOWBALL.com.   2833    NS      ns1.affiliation.com.
> SNOWBALL.com.   2833    NS      ns4.SNOWBALL.com.
>
> ;; ADDITIONAL RECORDS:
> ns1.affiliation.com.    172739  A       64.41.179.155
> ns4.SNOWBALL.com.       172739  A       64.41.179.249
>
> ;; Total query time: 216 msec
> ;; FROM: box to SERVER: default -- **.**.**.*
> ;; WHEN: Wed Jun 27 16:11:15 2001
> ;; MSG SIZE  sent: 34  rcvd: 126
>
> Any ideas? Is what I'm after possible?
>
> --
> Robert Schultz - bert at ncinter.net