On 07/23/2012 12:01 PM, Wojciech Puchar wrote:
http://www.gwebtools.com/ns-spy/<put your primary or secondary server here>

Anyone know from what data does it get such an info? By scanning every
possible registered domain ?

Could be by recording the info used by a dns resolver they manage. I suspect lots of other ways.

I do not want other to get list of what domains my DNS server serve.

ummmm.... sorry?
that's not how DNS works. Anyone querying a domain will know who serves that domain. Building a list is trivial. Delivering it to someone else is trivial. Look at why you don't want people to know what you are serving authoritative DNS for...and ask yourself why, and fix it. This is not secret. In general, if you are hoping DNS is keeping secrets for you, you are doing it wrong.

And this works - never gives complete list but always a good part.

thank you

what it gives is "interesting" -- I'm guessing logs from a big resolver, a search engine, or maybe domain registration changes. Just punched up something I thought could be interesting (a small NS, keeping a lot of unused domains from hostiles/squatters), and it told me things I didn't know, and other things that I think could be more public knowledge didn't show up at all, so I'm guessing domain registration changes (though I don't have a lot to go on there, either).

Legal? That would be kinda like telling drivers they can't make note of where stop signs are.

Nick.

Reply via email to