Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

is it possible, to list all entries a domain has on a DNS-Server? (Without having administrative access to the NS-Server)

I know that the domain should have sub-domains - I just do not know what they are named and what IP they are assigned to.


share|improve this question

Try query AXFR record:

$ dig @nsserver AXFR

DNS zone transfer:

DNS zone transfer, also sometimes known by its (most common) opcode mnemonic AXFR, is a type of DNS transaction. It is one of the many mechanisms available for administrators to employ for replicating the databases containing the DNS data across a set of DNS servers. Zone transfer comes in two flavors, full (opcode AXFR) and incremental (IXFR). Nearly universal at one time, it is now becoming less popular in favor of the use of other database replication mechanisms that modern DNS server packages provide.

share|improve this answer
That would imply a very badly setup DNS server! – Niall Donegan Feb 19 '11 at 18:27
Few servers offer transfer to the public anymore. They generally only allow transfer to secondary servers and other authorized hosts. Unless your host is trusted, it is unlikely the server will give the information you are looking for. – BillThor Feb 20 '11 at 1:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.