[dns-operations] Glue IP addresses in whois output in .com (and may be others)
dot at dotat.at
Mon Oct 9 15:20:33 UTC 2017
Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
> I have the strange feeling that I'm the last human on earth to
> discover that .com whois no longer publishes the IP addresses of glue
Hmm, yes, something has definitely changed.
The whois database does still have the nameserver objects if you ask for
them directly, e.g.
$ whois -h whois.verisign-grs.com 'nameserver tigdns02.socgen.com'
It used to be the case that there was an amazing number of spammy host
object names that `whois` would return due to fuzzy matching, especially
if you asked for things like `microsoft.com`. The Verisign `whois help`
output still talks about fuzzy matching but it doesn't actually seem to do
it any more.
A while back I changed FreeBSD whois to prefix queries to Verisign with
`domain` to suppress the spam. Looks like I can rip that code out again :-)
f.anthony.n.finch <dot at dotat.at> http://dotat.at/ - I xn--zr8h punycode
Trafalgar: Easterly or northeasterly 4 or 5 at times in far southeast,
otherwise variable 3 or 4. Slight or moderate. Fair. Moderate or good.
More information about the dns-operations