Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I get from a specific name server, say, all A records pointing to a specific IP x.y.z.w ??

I've been trying with reverse DNS lookup tools, but I cant manage to get what I need.

share|improve this question
Do you have access to the server? What OS and DNS server is the server running? What OS are you running? – MDMarra Aug 17 '10 at 19:02
No, I dont have access to it. Otherwise, I could just do what Chris suggests. – GetFree Aug 17 '10 at 19:13
right, that's why I asked. My comment was posted before his answer... – MDMarra Aug 17 '10 at 19:24
up vote 3 down vote accepted

Remotely: that would require a zone transfer, which will be blocked unless security on the server was configured very poorly.

Locally: You can open the zone file and grep through it.

share|improve this answer
Yes, remotely. It's not one of my servers – GetFree Aug 17 '10 at 19:04
That'd be "no", it ain't happening. – Chris S Aug 17 '10 at 19:28

This is impossible.

If you had admin access to the server in question you could grep the configuration files, but within the DNS protocol you just can't do it.

Even AXFR isn't sufficient, since even if it's enabled, you'd have to know every single domain name being served from that server.

share|improve this answer

The simple answer is No. I have seen a site that claimed to do this, but it didn't serve all the A records for cases where I knew some of the answer.

The PTR records used for reverse DNS records belong to different zones than the related A records. They may note be administered in the same DNS servers or by the same organizaations. It is possible that several DNS administrations have A records pointing to the same IP address. The DNS admimistrator for the PTR records may well be unaware of at least some of them.

There are a number of services offering Dynamic DNS. It would be extremely rare for the PTR to match A record. In many case there is no PTR record for the IP address.

For properly configured mail servers there will be a PTR record matching the A record for the mail service. This may not be the only A record for the server. It has been my experience that most spam comes from IP addresses where the PTR record does not match the A record, and in many case at least one record is missing.

If an address is also used for virtual Web servers, there will be more than one A record. These may be spread across a number of domains, and the various DNS aministrators may be unware that others are using the same IP address.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.