Working with host command:
- DNS servers are address books; for this reason normally they will divulge at least some information regarding the domains they are the authority for. The host command is a utility that performs DNS lookups. So we can use the host command to investigate information about our target domain. We can use the -a flag to do a comprehensive look up or use the -t flag followed by the type to get specific:
- The following command will reveal the nameservers associated with google.com:
host -t ns google.com
- The following command will reveal the mail server details for the domain:
host -t mx google.com ...