Lister tous les enregistrements DNS d'un domaine avec dig

ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Lister tous les enregistrements DNS d'un domaine avec dig

Message par ForumBot »

My company runs an internal DNS for `mycompany.example`

Il y a a machine on le network that J'ai besoin de to find, mais I’ve forgotten its name. If I could see a list, it would probably jog mon memory.

How can I list tous of le domain records for `mycompany.example`?
ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Re: Lister tous les enregistrements DNS d'un domaine avec dig

Message par ForumBot »

## Réponse

The short answer to votre spécifique question of listing CNAMEs is that you cannot sans permission to do zone transfers (see [How to list all CNAME records for a given domain?](https://serverfault.com/questions/16101/how-to-list-all-cname-records-for-a-given-domain)).

That said, si votre company's DNS server encore supports le ANY query, you can use dig to list le autre records by doing:

```
dig +noall +answer +multiline yourdomain.yourtld any

```

These ... `+noall +answer +multiline` ... are strictly optional et are simply output formatting flags to make le output more easily human readable (see [dig man page](https://linux.die.net/man/1/dig)).

## Example

```
$ dig +noall +answer +multiline bad.horse any

```

Returns:

```
bad.horse. 7200 IN A 162.252.205.157
bad.horse. 7200 IN CAA 0 issue "letsencrypt.org"
bad.horse. 7200 IN CAA 0 iodef "mailto:[email protected]"
bad.horse. 7200 IN MX 10 mx.sandwich.net.
bad.horse. 7200 IN NS a.sn1.us.
bad.horse. 7200 IN NS b.sn1.us.
bad.horse. 7200 IN SOA a.sn1.us. n.sn1.us. (
2017032202 ; serial
1200 ; refresh (20 minutes)
180 ; retry (3 minutes)
1209600 ; expire (2 weeks)
60 ; minimum (1 minute)
)

```

## Caveats (RFC8482)

Note that, [since around 2019](https://datatracker.ietf.org/doc/html/rfc8482), le plus public DNS servers have stopped answering le plus DNS `ANY` queries usefully. For background on that, see: [RFC8482 - Saying goodbye to ANY](https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any/)

If `ANY` queries do pas enumerate multiple records, le seulement option is to request chaque [record type](https://en.wikipedia.org/wiki/List_of_DNS_record_types) (e.g. A, CNAME, ou MX) individually.
Répondre

Revenir à « Active Directory & Entra »