<blockquote>
  <p>This question exists because it has
  historical significance, but it is not
  considered a good, on-topic question
  for this site, so please do not use it
  as evidence that you can ask similar
  questions here.</p>
  
  <p>More info: <a href="https://stackoverflow.com/faq">https://stackoverflow.com/faq</a></p>
</blockquote>

<p>Anyone knows if it's possible to find all A records, CNAME or subzone records configured for a domain name?</p>

<p>For example, domain.com:</p>

<pre><code>www IN CNAME domain.com.
subdomain1 IN CNAME domain.com.
subdomain2 IN CNAME domain.com. 

subdomain1 IN A 123.4.56.78.
subdomain2 IN A 123.4.56.79. 
</code></pre>

<p>I want to keep a sub-domain private where I'll run an admin application (it will be password protected and on a special port, but I would prefer to keep it as private as possible).</p>

It used to be possible with:
```
```
host -a -l domain.com
```
```