dig returns list of root name servers for certain sites

Barry Margolin barmar at alum.mit.edu
Tue Apr 17 00:36:59 UTC 2007


In article <evvc8t$2rpp$1 at sf1.isc.org>, "Ian Manners" <ian at os2site.com> 
wrote:

> Hi Vishwas
> 
> >Am wondering how did these site populate their IP addresses at the
> >time of their inception.
> 
> Spammers moving DNS servers ?
> The domains look like something the spammers would use for
> site redirects, could actually look at them etc but is it really
> worth the time.
> 
> ie, 89.com
> 
> [I:\]host 89.com
> 89.com has address 38.144.193.194
> 89.com has address 63.236.2.233
> 89.com mail is handled (pri=10) by mail.89.com
> 
>  Domain servers in listed order
>     DNS.NS2.ORG
>     DNS.NS1.ORG
> 
> Niether of which have reverse delegations but DNS servers can still get
> the info from them ok.
> 
> m.gtld-servers.net claims those DNS servers are authoritive but the
> domains dont have glue.

There's no need for glue in this case, because the nameservers are not 
in the domain they're hosting.  The GTLD-SERVERS.NET servers only give 
out glue records if the servers are in .NET or .COM; since these are in 
..ORG, they don't get glue.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list