[geeks] How to block an entire domain?

der Mouse mouse at Rodents.Montreal.QC.CA
Thu Oct 11 09:29:57 CDT 2007


> However, I'm still interested in finding out how I could traverse a
> DNS "tree" and get all the IP address that belong to hosts in the
> domain and subdomains.

The only form of this the DNS supports is a zone transfer, and that
works only if the DNS server permits zone transfers to some host you
have access to.  This is perhaps worth trying, but unlikely.

> A general suggestion would be fine, I don't expect to find a ready
> made program to do it.

"dig -t axfr" works for me with a zone/host combination I control (and
thus can allow transfers for).

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse at rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B



More information about the geeks mailing list