get a domain's dns records

Torinthiel torinthiel at
Fri Jan 21 14:20:11 UTC 2011

Dnia 2011-01-21 08:50 Barry Margolin napisał(a):

>In article <mailman.1415.1295616325.555.bind-users at>,
> Joseph S D Yao <jsdy at> wrote:
>> On Fri, Jan 21, 2011 at 02:19:45PM +0800, pyh at wrote:
>> > 
>> > I'm jsut curious, how does "" know the dns records in my domain 
>> > ( 
>> > 
>> > The page shows some of my RRs exactly: 
>> > 
>> > 
>> The title of the page is, " DNS Lookup | Nameserver Lookup -
>> -".  They probably did just exactly that - DNS lookup.
>> Anything in DNS is public information.
>But the nameservers for the domain don't allow public zone transfers.  
>So if you know the names in the zone you can look them up, but how did 
>the site list the names in his zone?

My guess would be that they don't list the whole zone. Look what's there: (dig any and some quite easy to guess prefixes: 
mail, test and www. And everything deduced from them, like names and resolve to.
Probably all questions asked with ANY recordtype
I've tested on two other domains, and it looks like that - results show that 
common prefixes also include blog. And they have some filtering of results, 
as I have a * TXT record which didn't show up as blog entry. Actually dig 
any on my zone gives even more information - e.g. SPF record , which didn't 
show up on results. And they don't support third-level domains as well - 
asking form returns information about

More information about the bind-users mailing list