From owner-freebsd-isp@FreeBSD.ORG Mon Jul 21 11:27:43 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7D40837B409 for ; Mon, 21 Jul 2003 11:27:43 -0700 (PDT) Received: from unix1.sihope.com (unix1.sihope.com [207.195.195.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8495943FA3 for ; Mon, 21 Jul 2003 11:27:42 -0700 (PDT) (envelope-from adamm@sihope.com) Received: from unix1.sihope.com (adamm@localhost.sihope.com [127.0.0.1]) by unix1.sihope.com (8.12.9/8.11.6) with ESMTP id h6LIRfN5022892; Mon, 21 Jul 2003 13:27:41 -0500 (CDT) Received: from localhost (adamm@localhost)h6LIRfIU022889; Mon, 21 Jul 2003 13:27:41 -0500 (CDT) X-Authentication-Warning: unix1.sihope.com: adamm owned process doing -bs Date: Mon, 21 Jul 2003 13:27:40 -0500 (CDT) From: Adam Maloney To: Ted Cabeen In-Reply-To: <87ptk368up.fsf@gray.impulse.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-isp@freebsd.org cc: Evren Yurtesen Subject: Re: checking dns records from named.conf X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jul 2003 18:27:44 -0000 I suppose you could "dig @yourresolver domain.org ns" - and let your resolver do the recursion. That seems to give me the correct output for a random .org... On Mon, 21 Jul 2003, Ted Cabeen wrote: > Adam Maloney writes: > > > Something like: > > > > for DOMAIN in `cat /etc/named.conf | grep "zone" | awk '{ print $2 }' | > > sed s/\"//g`; do dig @f.gtld-servers.net $DOMAIN | grep "ns1.ispro.net.tr" > > 2>&1 > /dev/null || echo "$DOMAIN not pointed here"; done > > > > (untested, but basically what I've done in the past whenever I need taht). > > For each domain in named.conf, query the root-servers for the authorative > > NS records (ns1.ispro.net.tr should be replaced with your primary > > nameserver). Then if the grep does not succeed (your nameserver not in > > the output) then echo the domain so we know about it. > > > > May take some tweaking. > > This works, but only for .com and .net addresses. For .org you have > to query nstld.com, and for any of the other GTLDs or the CCTLDs, you > have to hit their servers. Does anybody know of a program that does > this all automatically? Would be a nice little utility to write. > > -- > Ted Cabeen http://www.pobox.com/~secabeen ted@impulse.net > Check Website or Keyserver for PGP/GPG Key BA0349D2 secabeen@pobox.com > "I have taken all knowledge to be my province." -F. Bacon secabeen@cabeen.org > "Human kind cannot bear very much reality."-T.S.Eliot cabeen@netcom.com >