dont understand dns tree with fishing email url , dns-friewall

[Steven Carr]

On 8 June 2014 22:16, Hans-Cees Speel <hanscees at hanscees.com> wrote:
> Somehow it doesn't work, so they probably use a trick.
> But I can't find the dns servers. Any help is apreciated.

No trick, query for the SOA, then query for the NS of the domain
returned in the SOA...


sjcarr at elmo:~ $ dig www.ing-beveiligingsoftware.nl.ae soa

; <<>> DiG 9.10.0-P1 <<>> www.ing-beveiligingsoftware.nl.ae soa
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18926
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.ing-beveiligingsoftware.nl.ae. IN    SOA

;; AUTHORITY SECTION:
nl.ae.            3600    IN    SOA    ns0.transip.net.
hostmaster.transip.nl. 2014060401 14400 1800 2419200 3600

;; Query time: 50 msec
;; SERVER: 172.16.0.250#53(172.16.0.250)
;; WHEN: Sun Jun 08 22:27:51 BST 2014
;; MSG SIZE  rcvd: 134

sjcarr at elmo:~ $ dig nl.ae ns

; <<>> DiG 9.10.0-P1 <<>> nl.ae ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36428
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;nl.ae.                IN    NS

;; ANSWER SECTION:
nl.ae.            3541    IN    NS    ns1.transip.nl.
nl.ae.            3541    IN    NS    ns2.transip.eu.
nl.ae.            3541    IN    NS    ns0.transip.net.

;; Query time: 4 msec
;; SERVER: 172.16.0.250#53(172.16.0.250)
;; WHEN: Sun Jun 08 22:28:08 BST 2014
;; MSG SIZE  rcvd: 119