是否可以找到给定域名的所有 DNS 子域? [英] Is it possible to find all DNS subdomains for a given domain name?

问题描述

这个问题存在是因为它有历史意义，但不是被认为是一个很好的主题问题对于这个网站，所以请不要使用它作为您可以询问类似问题的证据问题在这里.

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here.

更多信息:https://stackoverflow.com/faq

有谁知道是否可以找到为域名配置的所有 A 记录、CNAME 或子区域记录?

Anyone knows if it's possible to find all A records, CNAME or subzone records configured for a domain name?

例如 domain.com:

For example, domain.com:

www IN CNAME domain.com.
subdomain1 IN CNAME domain.com.
subdomain2 IN CNAME domain.com. 

subdomain1 IN A 123.4.56.78.
subdomain2 IN A 123.4.56.79. 

我想将一个子域保密，我将在其中运行管理应用程序(它将受密码保护并位于特殊端口上，但我更愿意将其尽可能保密).

I want to keep a sub-domain private where I'll run an admin application (it will be password protected and on a special port, but I would prefer to keep it as private as possible).

推荐答案

正如其他人所说，您想要的是所谓的区域转移.如果它是您自己的域，您可以配置 DNS 服务器以将其提供给您.如果它是针对其他某个域的，您可能不会得到它，因为大多数 DNS 管理员认为它是一种安全威胁.

Like others have said, what you want is a so called zone-transfer. If it is your own domain you can configure the DNS server to give it to you. If it is for some other domain you probably don't get it, since most DNS-admins consider it a security threat.

即使单个记录不是问题(这就是 DNS 的问题)，但如果一个邪恶的人获得了您的所有记录的列表，它也可能是一个问题:它可以简化攻击.

Even if an individual record isn't a problem (thats what the DNS it therefore) it could be a problem if an evil person gets a list of all your records: It could simplify an attack.

这篇关于是否可以找到给定域名的所有 DNS 子域?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！