[clug] find-like DNS search

[Peter Barker]

On Tue, 27 Nov 2007, Michael James wrote:

> Anyone know a DNS search that will look for a hostname
> searching all subdomains for the given name.
>
> Anyone even know how to query a domain for it's subdomains?

The word you're after is "transfer", and they're usually blocked.  Here's 
an example of one that's not blocked:

----
pbarker at apiomerus:~$ dig -t axfr malaria.fith.priv

; <<>> DiG 9.3.4 <<>> -t axfr malaria.fith.priv
;; global options:  printcmd
malaria.fith.priv.      86400   IN      SOA     malaria.fith.priv. 
root.ns3.mycomport.com. 208 10800 3600 3600000 86400
malaria.fith.priv.      86400   IN      NS      dengue.malaria.fith.priv.
anothertest.malaria.fith.priv. 86400 IN A       10.17.32.1
db.malaria.fith.priv.   86400   IN      NS      dengue.malaria.fith.priv.
fnard.db.malaria.fith.priv. 86400 IN    A       10.17.32.1
fnord.db.malaria.fith.priv. 86400 IN    A       10.17.32.1
fnurd.db.malaria.fith.priv. 86400 IN    A       10.17.32.1
removeme.db.malaria.fith.priv. 86400 IN A       10.17.32.1

...

malaria.fith.priv.      86400   IN      SOA     malaria.fith.priv. 
root.ns3.mycomport.com. 208 10800 3600 3600000 86400
;; Query time: 62 msec
;; SERVER: 10.20.1.2#53(10.20.1.2)
;; WHEN: Tue Nov 27 17:23:53 2007
;; XFR size: 15 records (messages 1)

----

Yours,
-- 
Peter Barker                          |   Programmer,Sysadmin,Geek.
pbarker at barker.dropbear.id.au	      |   You need a bigger hammer.
:: It's a hack! Expect underscores! - Nigel Williams