Date: Mon, 21 Jul 2003 13:27:40 -0500 (CDT) From: Adam Maloney <adamm@sihope.com> To: Ted Cabeen <secabeen@pobox.com> Cc: Evren Yurtesen <yurtesen@ispro.net.tr> Subject: Re: checking dns records from named.conf Message-ID: <Pine.BSI.4.05L.10307211325580.13779-100000@unix1.sihope.com> In-Reply-To: <87ptk368up.fsf@gray.impulse.net>
next in thread | previous in thread | raw e-mail | index | archive | help
I suppose you could "dig @yourresolver domain.org ns" - and let your resolver do the recursion. That seems to give me the correct output for a random .org... On Mon, 21 Jul 2003, Ted Cabeen wrote: > Adam Maloney <adamm@sihope.com> writes: > > > Something like: > > > > for DOMAIN in `cat /etc/named.conf | grep "zone" | awk '{ print $2 }' | > > sed s/\"//g`; do dig @f.gtld-servers.net $DOMAIN | grep "ns1.ispro.net.tr" > > 2>&1 > /dev/null || echo "$DOMAIN not pointed here"; done > > > > (untested, but basically what I've done in the past whenever I need taht). > > For each domain in named.conf, query the root-servers for the authorative > > NS records (ns1.ispro.net.tr should be replaced with your primary > > nameserver). Then if the grep does not succeed (your nameserver not in > > the output) then echo the domain so we know about it. > > > > May take some tweaking. > > This works, but only for .com and .net addresses. For .org you have > to query nstld.com, and for any of the other GTLDs or the CCTLDs, you > have to hit their servers. Does anybody know of a program that does > this all automatically? Would be a nice little utility to write. > > -- > Ted Cabeen http://www.pobox.com/~secabeen ted@impulse.net > Check Website or Keyserver for PGP/GPG Key BA0349D2 secabeen@pobox.com > "I have taken all knowledge to be my province." -F. Bacon secabeen@cabeen.org > "Human kind cannot bear very much reality."-T.S.Eliot cabeen@netcom.com >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.05L.10307211325580.13779-100000>