是否可以找到给定域名的所有DNS子域？ [英] Is it possible to find all DNS subdomains for a given domain name?

问题描述

这个问题存在，因为它有
的历史意义，但它不是
被认为是这个网站的一个很好的主题问题
，所以请做不使用
作为证据，您可以在这里询问类似的
问题。

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here.

更多信息： https://stackoverflow.com/faq

任何人都知道是否可以找到所有的A记录，为域名配置的CNAME或子区域记录？

Anyone knows if it's possible to find all A records, CNAME or subzone records configured for a domain name?

例如，domain.com：

For example, domain.com:

www IN CNAME domain.com.
subdomain1 IN CNAME domain.com.
subdomain2 IN CNAME domain.com. 

subdomain1 IN A 123.4.56.78.
subdomain2 IN A 123.4.56.79. 

我想保持一个子域私有，我将在其中运行一个管理应用程序（它将是密码保护和特殊端口，但我宁愿尽可能保密）。

I want to keep a sub-domain private where I'll run an admin application (it will be password protected and on a special port, but I would prefer to keep it as private as possible).

推荐答案

像其他人一样说你想要的是一个所谓的区域转移。如果是您自己的域，您可以配置DNS服务器给它。如果是某些其他域名，那么大多数DNS管理员都认为这是一个安全威胁。

Like others have said, what you want is a so called zone-transfer. If it is your own domain you can configure the DNS server to give it to you. If it is for some other domain you probably don't get it, since most DNS-admins consider it a security threat.

即使个别记录不是问题（因为它是什么DNS）如果一个邪恶的人获得所有记录的列表可能是一个问题：它可以简化攻击。

Even if an individual record isn't a problem (thats what the DNS it therefore) it could be a problem if an evil person gets a list of all your records: It could simplify an attack.

这篇关于是否可以找到给定域名的所有DNS子域？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！