[linux] Re: whois yahoo.com was Re: OT: SPAM

[Robert M. Stockmann]

On Sat, 23 Jun 2007, Robert M. Stockmann wrote:

> Date: Sat, 23 Jun 2007 16:26:20 +0200 (CEST)
> From: Robert M. Stockmann <stock op stokkie.net>
> Reply-To: linux op lists.nllgg.nl
> To: Linux mailinglist <linux op lists.nllgg.nl>
> Subject: [linux] Re: whois yahoo.com was Re: OT: SPAM 
> 
> On Sat, 23 Jun 2007, Hugo van der Kooij wrote:
> 
> > Date: Sat, 23 Jun 2007 10:50:03 +0200 (CEST)
> > From: Hugo van der Kooij <hvdkooij op vanderkooij.org>
> > Reply-To: linux op lists.nllgg.nl
> > To: Linux mailinglist <linux op lists.nllgg.nl>
> > Subject: [linux] Re: OT: SPAM versterker gedetecteerd.
> > 
> > On Sat, 23 Jun 2007, Robert M. Stockmann wrote:
> > 
> > > Robert
> > > PS. Heeft iemand onlangs nog eens geprobeerd om een whois query uit
> > > te voeren? probeer eens :
> > >
> > >    whois yahoo.com
> > >    whois aol.com
> > >    whois hotmail.com
> > >    whois microsoft.com
> > 
> > Niks mis mee. Maar ik gebruik whois normaal alleen voor IP lookups. Maar 
> > ondersteun je wel recursive queries?
> > 
> > $ whois yahoo.com
> > [Querying whois.internic.net]
> > [Redirected to whois.markmonitor.com]
> > [Querying whois.markmonitor.com]
> > [whois.markmonitor.com]
> > MarkMonitor.com - The Leader in Corporate Domain Management
> > ......<Normale YAHOO listing>.....
> > 
> 
> Ik krijg hier toch wat anders (het resultaat is toch niet
> afhankelijk van de versie van whois die je draait?? ) :
> 
> [jackson:stock]:(~)$ whois yahoo.com
> 
> Whois Server Version 2.0
> 
> Domain names in the .com and .net domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
> 
>    Server Name: YAHOO.COM.ZZZZZZ.MORE.INFO.AT.WWW.BEYONDWHOIS.COM
>    IP Address: 203.36.226.2
>    Registrar: TUCOWS INC.
>    Whois Server: whois.tucows.com
>    Referral URL: http://domainhelp.opensrs.net

[ sommige whois entries verwijderd ]

>    Server Name: YAHOO.COM.JENNINGSASSOCIATES.NET
>    IP Address: 66.218.71.205
>    Registrar: DOTSTER, INC.
>    Whois Server: whois.dotster.com
>    Referral URL: http://www.dotster.com

Brewster Jennings is een CIA front operation

> 
>    Domain Name: YAHOO.COM
>    Registrar: MARKMONITOR INC.
>    Whois Server: whois.markmonitor.com
>    Referral URL: http://www.markmonitor.com
>    Name Server: NS1.YAHOO.COM
>    Name Server: NS2.YAHOO.COM
>    Name Server: NS3.YAHOO.COM
>    Name Server: NS4.YAHOO.COM
>    Name Server: NS5.YAHOO.COM
>    Status: clientDeleteProhibited
>    Status: clientTransferProhibited
>    Status: clientUpdateProhibited
>    Updated Date: 22-jul-2005
>    Creation Date: 18-jan-1995
>    Expiration Date: 19-jan-2012
> 
> MarkMonitor.com reserves the right to modify these terms at any time.
> By submitting this query, you agree to abide by this policy.
> 
> Registrant:
> 	Yahoo! Inc. (DOM-272993)
> 	701 First Avenue
> 	Sunnyvale CA 94089
> 	US
> 
>     Domain Name: yahoo.com
> 
> 	Registrar Name: Markmonitor.com
> 	Registrar Whois: whois.markmonitor.com
> 	Registrar Homepage: http://www.markmonitor.com
> 
>     Administrative Contact:
> 	Domain Administrator (NIC-1382062)  Yahoo! Inc.
> 	701 First Avenue
> 	Sunnyvale CA 94089
> 	US
> 	domainadmin op yahoo-inc.com
> 	+1.4083493300
> 	Fax- +1.4083493301
>     Technical Contact, Zone Contact:
> 	Domain Administrator (NIC-1372925)  Yahoo! Inc.
> 	701 First Avenue
> 	Sunnyvale CA 94089
> 	US
> 	domainadmin op yahoo-inc.com
> 	+1.4083493300
> 	Fax- +1.4083493301
> 
>     Created on..............: 1995-Jan-18.
>     Expires on..............: 2012-Jan-19.
>     Record last updated on..: 2006-Dec-29 14:54:25.
> 
>     Domain servers in listed order:
> 
>     NS4.YAHOO.COM		
>     NS5.YAHOO.COM		
>     NS1.YAHOO.COM		
>     NS2.YAHOO.COM		
>     NS3.YAHOO.COM		
> 
> MarkMonitor.com - The Leader in Corporate Domain Management
> ----------------------------------------------------------
> For Global Domain Consolidation, Research & Intelligence,
> and Enterprise DNS, go to: www.markmonitor.com
> ----------------------------------------------------------
> [jackson:stock]:(~)$ rpm -q -f /usr/bin/whois
> whois-4.7.13-1mdk
> [jackson:stock]:(~)$ rpm -q -i whois-4.7.13-1mdk
> Name        : whois                        Relocations: /usr 
> Version     : 4.7.13                            Vendor: (none)
> Release     : 1mdk                          Build Date: Sat 15 Apr 2006 02:07:42 AM CEST
> Install Date: Tue 07 Nov 2006 04:36:18 AM CET  Build Host: jackson.stokkie.net
> Group       : Networking/Other        Source RPM: whois-4.7.13-1mdk.src.rpm
> Size        : 432712                           License: GPL
> Signature   : (none)
> URL         : http://www.linux.it/~md/software/
> Summary     : Enhanced WHOIS client
> Description :
> This is a new whois (RFC 954) client rewritten from scratch.
> 
> It is derived from and compatible with the usual BSD and RIPE whois(1)
> programs.
> 
> It is intelligent and can automatically select the appropriate whois
> server for most queries.
> [jackson:stock]:(~)$

Als ik hier check bij http://www.linux.it/~md/software/ wordt ik voor
whois doorverwezen naar :

http://ftp.debian.org/debian/pool/main/w/whois/

Maar ehh, wat vreemd, whois-4.7.13.tar.gz staat daar niet meer.
Sterker nog, een aantal versies van whois uit 2006 en 2005 zijn verwijderd.
(alle versies tussen whois-4.7.5 en whois-4.7.20)

Vr.gr.

Robert
-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock op stokkie.net