[thelist] DNS Lookup question

[Anthony Baratta]

Matt...

There used to be a command in nslookup that allowed you to list all the known A and CNAME records. But most if not all DNS servers have that turned off now. It was being abused.

So now unless you publish the sub-domain somewhere or someone does a dictionary style query against the DNS server, the sub-domains are semi-private.

I wouldn't depend upon that staying private, but it's not out in the open either.

-----Original message-----
From: Matt McKeon matt at camadro.com
Date: Tue, 11 Mar 2008 10:07:55 -0700
To: thelist at lists.evolt.org
Subject: [thelist] DNS Lookup question

> Hey All,
> 
> Is it possible to find out all the sub-domains of a domain? For 
> instance, if I created A records for private.domain.com and 
> secret.domain.com; are there tools that one could run to find those 
> sub-domains if they are aware of domain.com?
> 
> I tried some online tools and searched around a bit but couldn't come up 
> with anything useful. Just want to make sure before I roll some stuff out...
> 
> Thanks,
> Matt
> --