August 2012

Lesser known DNS tools and BIND tricks © Carsten Strotmann / dnsworkshop.org

Lesser known DNS tools and BIND tricks

dnsworkshop.org

August 2012

About me

6502

• Basic
• Forth
• Assembler

8086

• MS-DOS
• Pascal
• C
• Assembler

Power CPU

• AS/400
• CL
• RPG
• SNA

386

• OS/2
• Rexx
• Modula
• Oberon
• Java
• NetBIOS

Unix

• Solaris
• Linux
• OpenBSD
• FreeBSD
• TCP/IP

Network

• DNS
• DHCP
• IPv6
• DNSSEC

Work

• Men & Mice
• ISC
• LinuxHotel

DNS lookup

quick DNS lookup

• DNS lookup tool, easy to parse output

  dnsget guug.de

  or

  dig guug.de +short

pretty print DNS

• pretty print dns results

  dig soa dnsworkshop.org +multiline

checking SOA records

• lookup SOA record from all authoritative DNS servers of a zone

  dig dnsworkshop.org +nssearch

map DNS names in a zone

• brute force map all DNS names in a zone

  dnsmap guug.de

bulk resolve names

• asynchronous DNS to resolve names (or IP addresses to names) in log-files

  cat queryfile-example-1million | head | adnshost -af

DNS resolve filter

• resolve IP addresses to names in a filter

  lsof -i -n | adnsresfilter

browse multicast DNS

• Bonjour / Rendezvous / Avahi DNS service discovery browser

  avahi-browse

  or

  mdns-scan

mailserver for a domain

• quick find the mailserver for a domain

  ldns-mx isc.org

a terse display of a zone

• print a parse-able tree view of a DNS zone

  dns_tree gnu.org

graphical DNS and DNSSEC lookup tool