14 Feb
2001
14 Feb
'01
15:57
Martin Mielke wrote:
Dear all,
I assume that due to security reasons such command does not exist "by default" in custom installations but...
Is there any command to query a DNS-server for all the hostnames being served by it? Of course, I could nmap to discover which machines are up and running, but I look for something similar to 'ypcat hosts' ...
You can try the "ls -d domain.name" command within nslookup to list all records for domain.name, but it won't work unless the nameserver is configured to "allow-transfer" to you (or everyone). Basically, odds are it won't work. I don't know of any other way to query a reasonably secure nameserver to find all hostnames though. Ken