Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm attempting to improve my understanding of the DNS system and am confused as to how domaintools.com manages to resolve all DNs associate with an IP addr.

After playing around with dig, i'm stuck.

Example on domain dressupgames.com

using dig::

$ dig +short dressupgames.com                                                                                      
173.231.156.28

$ dig +short -x 173.231.156.28                                                                                     
28.24/29.156.231.173.in-addr.arpa.

$ dig +short 28.24/29.156.231.173.in-addr.arpa
67.215.65.132

$ dig +short -x 67.215.65.132                                                                                      
hit-nxdomain.opendns.com.

$ dig +short hit-nxdomain.opendns.com
67.215.65.132

Presumably 173.231.156.28 is an alias for 67.215.65.132 (?). Now using DomainTools web interface http://www.domaintools.com/research/reverse-ip/ i get the promise of 129 results.

How can i find these results using commandline tools?

share|improve this question
6  
You're using some feature of OpenDNS which redirects nonexistent DNS lookups to their own servers rather than returning NXDOMAIN. You can turn that off. –  Michael Hampton Oct 30 '12 at 16:03

1 Answer 1

DNS doesn't contain an automatic IP to hostname lookup mechanism. It does have PTR records, but these are configured manually and don't correspond with the A records in most cases. Sites like domaintools.com simply have a big database of all the forward mappings they've discovered and they query this when an IP is looked up. The results are not guaranteed to be complete or up to date.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.