[geeks] How to block an entire domain?

[Phil Stracchino]

Geoffrey S. Mendelson wrote:
> On Wed, Oct 10, 2007 at 10:35:47PM -0500, Micah R Ledbetter wrote:
>> On Oct 10, 2007, at 16:56, Geoffrey S. Mendelson wrote:
> 
>> This may not be relevant to you, but undernet is a normal, legit IRC  
>> network. Additionally, since its one of the more popular networks,  
>> there are a lot of linked servers, so blocking access to something  
>> called "undernet.org" isn't going to fix the problem of connecting to  
>> the undernet network in general, even though it would fix the problem  
>> of this particular trojan.
> 
> To be honest, I don't use IRC and neither does my wife and middle son.
> Of course the day I block the protocol and ports, my youngest son will
> announce he as learned to read and wants to IRC with his schoolmates.
> :-)
> 
> Someone else suggested that I stop DNS lookups for the domain, and I did.
> However, I'm still interested in finding out how I could traverse a
> DNS "tree" and get all the IP address that belong to hosts in the 
> domain and subdomains.
> 
> A general suggestion would be fine, I don't expect to find a ready made
> program to do it.


host -t AXFR undernet.org ?

-- 
        Phil Stracchino                CDK#2
 Renaissance Man, Unix ronin, Perl hacker, Free Stater
 phil.stracchino at speakeasy.net   alaric at caerllewys.net
 Landline: 603-429-0220           Mobile: 603-320-5438
        It's not the years, it's the mileage.