haeredes: Confirm delegation of NS and MX records.

[ agpl, dns, program, utils ] [ Propose Tags ]

Haeredes is primarily useful for ISP network administrators. Customers will occasionally decide to switch hosts without alerting the current host; this can cause two problems:

  • With NS records, the previous host (at the very least) keeps hosting a DNS zone that does nothing. If that host uses their authoritative nameserver as a caching lookup server as well, it may return incorrect results to queries about the domain in question.

  • For MX records, the situation is slightly worse. Most mail servers will immediately accept mail for which the server thinks it is the ultimate destination. If a mail server is configured as the destination for a domain, but it is not the MX for that domain, then mail submitted to that server may possibly be lost. It is therefore important to remove domains from the old mail host as soon as the MX record is changed.

Haeredes can alert administrators when NS/MX records are changed. More detail can be found in the man page.

Examples:

Make sure example.com has the expected name servers, [ab].iana-servers.net:

$ haeredes a.iana-servers.net b.iana-servers.net <<< "example.com"

If you use --no-append-root and your nameservers are rooted, you must remember to supply the trailing dot yourself. Otherwise, you'll get false positives.

$ haeredes --no-append-root 
           a.iana-servers.net b.iana-servers.net 
           <<< "example.com"
Domain "example.com" delegates somewhere else: "b.iana-servers.net." "a.iana-servers.net."

Check orlitzky.com against the expected name servers, using d.gtld-servers.net:

$ haeredes --server 199.7.91.13 dns1.viabit.com dns2.viabit.com 
           <<< "orlitzky.com"

Check orlitzky.com against only one of the expected two nameservers:

$ haeredes dns1.viabit.com <<< "orlitzky.com"
Domain "orlitzky.com." delegates somewhere else: "dns2.viabit.com."

Check a nonexistent domain (we provide no delegates, since we know .invalid will not be delegated):

$ haeredes <<< "example.invalid"
Domain "example.invalid." not delegated.

Downloads

Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees

Candidates

  • No Candidates
Versions [RSS] 0.1, 0.2.0, 0.3.0, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.5.0, 0.5.1, 0.5.2, 0.5.3
Dependencies base (>=4 && <5), bytestring (>=0.10 && <0.11), cmdargs (>=0.10 && <0.11), dns (>=0.3.7), HUnit (>=1.2 && <1.3), iproute (>=1.2 && <1.3), MissingH (>=1.2 && <1.3), parallel-io (>=0.3 && <0.4), QuickCheck (>=2 && <3), test-framework (>=0.8 && <0.9), test-framework-hunit (>=0.3 && <0.4), test-framework-quickcheck2 (>=0.3 && <0.4) [details]
License GPL-3.0-only
Author Michael Orlitzky
Maintainer Michael Orlitzky <michael@orlitzky.com>
Category DNS, Utils
Home page http://michael.orlitzky.com/code/haeredes.php
Bug tracker mailto:michael@orlitzky.com
Source repo head: git clone http://michael.orlitzky.com/git/haeredes.git -b master
Uploaded by MichaelOrlitzky at 2013-08-01T20:05:14Z
Distributions NixOS:0.5.3
Reverse Dependencies 1 direct, 0 indirect [details]
Executables haeredes
Downloads 7813 total (36 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs not available [build log]
All reported builds failed as of 2016-12-20 [all 7 reports]