[lug] MX record lookups

[Riggs, Rob]

If it doesn't have a "whois" entry, it doesn't have an MX... It sounds like
they are spoofing hostnames or using bogus reverse lookup data. Your best
bet in that case is to lookup who owns the IP block and go at it from that
end. "whois xxx.xxx.xxx.xxx at whois.arin.net" (or whois.apnic.net,
whois.ripe.net) should do the trick.

-Rob

-----Original Message-----
From: D. Stimits [mailto:stimits at idcomm.com]
Sent: Tuesday, February 26, 2002 2:25 PM
To: BLUG
Subject: [lug] MX record lookups


What would be the proper way to find out who owns a domain name (in this
case origio.net) or who the registar is for that domain, if it is only
an MX record and normal nslookup or whois does not know anything about
it? Similar for ip addresses that are in email headers but which have no
reverse lookup...what is a good way to find out who they are?

D. Stimits, stimits at idcomm.com
_______________________________________________
Web Page:  http://lug.boulder.co.us
Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug