[dns-operations] Glue IP addresses in whois output in .com (and may be others)

Tony Finch dot at dotat.at
Mon Oct 9 15:20:33 UTC 2017

Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:

> I have the strange feeling that I'm the last human on earth to
> discover that .com whois no longer publishes the IP addresses of glue
> records.

Hmm, yes, something has definitely changed.

The whois database does still have the nameserver objects if you ask for
them directly, e.g.

$ whois -h whois.verisign-grs.com 'nameserver tigdns02.socgen.com'

It used to be the case that there was an amazing number of spammy host
object names that `whois` would return due to fuzzy matching, especially
if you asked for things like `microsoft.com`. The Verisign `whois help`
output still talks about fuzzy matching but it doesn't actually seem to do
it any more.

A while back I changed FreeBSD whois to prefix queries to Verisign with
`domain` to suppress the spam. Looks like I can rip that code out again :-)


f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Trafalgar: Easterly or northeasterly 4 or 5 at times in far southeast,
otherwise variable 3 or 4. Slight or moderate. Fair. Moderate or good.

More information about the dns-operations mailing list