WHOIS reports different ...

SlowCoder · 04-19-2008, 04:11 PM

Here's the setup:
- The firewall at the edge of my network points to a set of external DNS servers.
- My internal Windows DNS servers also point to the same external DNS servers to get their resolutions.

When I perform a whois on my firewall, I get a different name for the provided IP than when I do it from an internal Linux box, which uses the internal DNS servers. The internal whois is the correct one.

Why is this so, if they're eventually retrieving data from the same DNS servers?

bsdunix · 04-19-2008, 06:15 PM

So if you perform

Code:

$ whois -h TLD.whois-servers.net mydomain.TLD

from the firewall and a client box behind the firewall they both get different information?

Example:

Code:

$ whois -h org.whois-servers.net linuxquestions.org
Domain ID:D29371260-LROR
Domain Name:LINUXQUESTIONS.ORG
Created On:16-Jun-2000 17:03:17 UTC
Last Updated On:21-Feb-2008 02:17:00 UTC
Expiration Date:16-Jun-2011 17:03:17 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:OK
---snip---

SlowCoder · 04-19-2008, 08:46 PM

Actually, I don't remember the address I whois'd before, that yielded separate results. However, whoising now from both machines yields the same results. I got the same results as you posted for linuxquestions.org.

Dunno.

bsdunix · 04-19-2008, 09:06 PM

It was a network gremlin.