From owner-freebsd-isp@FreeBSD.ORG Mon Jul 21 11:19:27 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 13C2537B401 for ; Mon, 21 Jul 2003 11:19:27 -0700 (PDT) Received: from gray.impulse.net (gray.impulse.net [207.154.64.174]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9C4B943F75 for ; Mon, 21 Jul 2003 11:19:26 -0700 (PDT) (envelope-from secabeen@pobox.com) Received: by gray.impulse.net (Postfix, from userid 1000) id 26DD61D9; Mon, 21 Jul 2003 11:19:26 -0700 (PDT) To: Adam Maloney References: From: Ted Cabeen Date: Mon, 21 Jul 2003 11:19:26 -0700 In-Reply-To: (Adam Maloney's message of "Mon, 21 Jul 2003 12:12:23 -0500 (CDT)") Message-ID: <87ptk368up.fsf@gray.impulse.net> User-Agent: Gnus/5.1001 (Gnus v5.10.1) XEmacs/21.4 (Portable Code, berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-isp@freebsd.org cc: Evren Yurtesen Subject: Re: checking dns records from named.conf X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jul 2003 18:19:27 -0000 Adam Maloney writes: > Something like: > > for DOMAIN in `cat /etc/named.conf | grep "zone" | awk '{ print $2 }' | > sed s/\"//g`; do dig @f.gtld-servers.net $DOMAIN | grep "ns1.ispro.net.tr" > 2>&1 > /dev/null || echo "$DOMAIN not pointed here"; done > > (untested, but basically what I've done in the past whenever I need taht). > For each domain in named.conf, query the root-servers for the authorative > NS records (ns1.ispro.net.tr should be replaced with your primary > nameserver). Then if the grep does not succeed (your nameserver not in > the output) then echo the domain so we know about it. > > May take some tweaking. This works, but only for .com and .net addresses. For .org you have to query nstld.com, and for any of the other GTLDs or the CCTLDs, you have to hit their servers. Does anybody know of a program that does this all automatically? Would be a nice little utility to write. -- Ted Cabeen http://www.pobox.com/~secabeen ted@impulse.net Check Website or Keyserver for PGP/GPG Key BA0349D2 secabeen@pobox.com "I have taken all knowledge to be my province." -F. Bacon secabeen@cabeen.org "Human kind cannot bear very much reality."-T.S.Eliot cabeen@netcom.com