Re: [TCLUG:13925] IP Address range for a domain? (USE JWHOIS)

[Peter Lukas <peter@math.umn.edu>]

You can do it with the jwhois tool.  fwhois is more commonly packaged and
doesn't provide that kind of information.  You can fetch jwhois
from: http://www.gnu.org/software/jwhois/

Observe:
superfly@groove superfly]$ whois REAL-TIME.COM
Registrant:
Real Time Enterprises (REAL-TIME-DOM)
   10181 Crosstown Circle
   Eden Prairie, MN 55344
   US

   Domain Name: REAL-TIME.COM

   Administrative Contact:
      Tebbe, Amy  (AT113)  atebbe@REAL-TIME.COM
      (612)943-8700 (FAX) (612)943-8300 (612)943-8300 FAX (612) 935-6881
   Technical Contact, Zone Contact:
      Hostmaster, Domain  (HD307-ORG)  hostmaster@REAL-TIME.COM
      (612) 943-8700
Fax- (612) 943-8500
   Billing Contact:
      Tanner, Robert J  (RJT4)  tanner@REAL-TIME.COM
      (612)943-8700 (FAX) (612)943-8500

   Record last updated on 27-Feb-1999.
   Record created on 23-Apr-1995.
   Database last updated on 22-Feb-2000 13:19:20 EST.

   Domain servers in listed order:

   NS.REAL-TIME.COM		206.10.252.1
   NS2.REAL-TIME.COM		206.10.253.1
   NS.MR.NET			137.192.240.5

For IP Addresses (Including CIDR):

superfly@groove superfly]$ whois -h whois.arin.net 206.10.252.19
[whois.arin.net]
Minnesota Regional Network (NETBLK-MRNET-C-BLOCK8) MRNET-C-BLOCK8
			        206.8.0.0 - 206.11.255.255
Real Time Enterprises, Inc. (NETBLK-REAL-TIME1)	REAL-TIME1
				206.10.252.0 - 206.10.253.255

This tells me that Bob's got 2 class C's from our friends at Mr. Net.

Peter Lukas

On Tue, 22 Feb 2000, Thomas T. Veldhouse wrote:

> I don't need a sure way that is so general.  I know that the domain I am
> looking into is fixed.  I just needed to now its IP range.  I have found it
> thanks to Mark Kroska's answer.  It really was very simple.
> 
> Tom Veldhouse
> veldy@visi.com
> 
> ----- Original Message -----
> From: "Karl Morgan" <ksm@dogbrain.com>
> To: <tclug-list@mn-linux.org>
> Sent: Tuesday, February 22, 2000 8:57 PM
> Subject: Re: [TCLUG:13925] IP Address range for a domain?
> 
> 
> >
> > > Yep, there is a nice firewall.  SSH only.  However, the Northwest
> Airlines
> > > thing as scared the person I am helping.  So, I need to make sure that
> there
> > > is no "casual" connection.
> >
> > Tom,
> >
> > Like everyone else has already pointed out, there is no sure fire way
> > to do what you want to do. The domainname is not bound to the IP addr.
> > Also, just blocking with the domainname is no sure fire way to block
> > access either. Think about the person that leaves work, logs in
> > through thier ISP and then accesses this sight. There is no way you
> > can forsee all the combinations.
> >
> > Here are some things that may work but the results aren't guaranteed.
> > And i'll add that they aren't the solution to your problem.
> >
> > 1. Ask thier nameserver to enumerate the host entries:
> >
> > % nslookup
> > > server <thier-nameserver>
> > > ls <thier-domainname>
> >
> > Which may or may not work depending on the configuration of thier
> > DNS server.
> >
> > 2. You may be able to get some info out of ARIN regarding the company?
> >
> > go to http://www.arin.net/cgi-bin/whois.pl and search for the
> > company name.
> >
> > Otherwise, ... I don't think your seeing straight on this issue.
> >
> > - Karl
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > For additional commands, e-mail: tclug-list-help@mn-linux.org
> >
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
> 
>