Bindscan v. 0.9.2

A tool to check DNS zone files, like the ones bind uses.
A “scavenge” alternative.
It was written because “scavenge”, no longer mantained, doesn’t work on recent distributions.

Written in Perl, runs (unprivileged) on most distributions (including Mac OS X)
Pings hosts on multiple services to check if they're alive
Pings A, AAAA, NS and CNAME (if not belonging to the same zone)
Checks duplicates for records CNAME and PTR
Reports multiple A and AAAA records for the same address
Reports mismatch between A/AAAA and PTR
Reports CNAME and PTR referred to a CNAME rather than to A/AAAA
Many options available to customize check process

Download and expand the script: bindscan.zip

Ensure it's executable, run in terminal.

Contains man page: perldoc …path-to…/bindscan

Uno strumento per controllare le zone DNS, come quelle di bind.
Una alternativa a “scavenge”.
È stato scritto perché “scavenge”, non più mantenuto, non funziona su distribuzioni recenti.

Scritto in Perl, gira (senza privilegi di root) su praticamente ogni distribuzione (compreso Mac OS X)
Pinga gli host su servizi multipli per verificarne la risposta
Pinga A, AAAA, NS e CNAME (se non puntano alla stessa zona)
Controlla i duplicati per i record CNAME e PTR
Riporta record multipli A e AAAA per lo stesso indirizzo
Riporta disallineamenti tra A/AAAA e PTR
Riporta CNAME e PTR che puntano a CNAME e non a A/AAAA
Sono previste molte opzioni di customizzazione

Scaricare ed espandere lo script: bindscan.zip

Assicurarsi che sia flaggato eseguibile, lanciarlo via terminale.

Contiene una man page: perldoc …path-to…/bindscan

Syntax:
    bindscan [options] zone-name zone-file [ptr-name ptr-file]*
Options:
    -h --help      print help and exit - man: perldoc bindscan
    -l --log       Path to logfile (provide path, default: STDOUT)
    -p --noping    Skip ping tests (default: perform ping test)
    -P --nosynping Syntax tests without ping (default: ping)
    -q --quiet     Suppress progress report on STDERR
    -r --noptr     Skip PTR check (default: check if PTR(s) are provided)
    -R --noptrzone Skip report if PTR zone file is missing (default: report)
    -s --nosyn     Skip syntax tests (default: perform tests)
    -t --timeout   Seconds before timeout (provide integer, default: 2)
Parameters:
    zone-name      Mandatory: The name of the zone (e.g.: mylan.it)
    zone-file      Mandatory: Path to the forward zone file
    ptr-name       Optional:  Base IP of the PTR (e.g.: 205.139.26)
    ptr-file       Optional:  Path to the PTR zone file
                   Repeat PTR couples if more than one.
Parameters file:
    @filepath      Parameters couples
                   Any set of parameters zone couples (name/file) can be
                   replaced by a file (provide its full or local path).
                   This file reports per each line zone name and file path
                   separated by white space(s) and/or tab(s).
                   Comments prefixed by ";" or "#", empty lines are ignored.

Bindscan is © 2020 by Marco Balestra, altersoftware.it
Free for personal and commercial use, no implicit or explicit warranty is provided, released under GPL 4 license.