scripts/bash/dns-ecs-debug.bash

#!/usr/bin/env bash

# This script just digs domains that return information the authoritative
# nameserver receives which is resolver's IP and ECS if the server in
# question sends that.
# $@ takes all parameters so another DNS server can be specified
# e.g. ./dns-ecs-debug.bash @9.9.9.11

printf 'Remember the usage being ./dns-ecs-debug.bash @<server>\n'
printf '\tWARNING! Unbound on localhost seems to eat the ECS!\n\n'

# Let's get our own IPs first
echo "Actual IP addresses"
curl -L4s --doh-url https://dns.quad9.net/dns-query https://icanhazip.com/
curl -L6s --doh-url https://dns.quad9.net/dns-query https://icanhazip.com/
echo ""

echo "Google $@"
dig +short TXT o-o.myaddr.l.google.com. "$@"
echo ""

echo "Akamai dualstack $@"
dig +short TXT whoami.ds.akahelp.net. "$@"
echo ""

echo "Akamai IPv6 $@"
dig +short TXT whoami.ipv6.akahelp.net. "$@"
echo ""

echo "Akamai IPv4 $@"
dig +short TXT whoami.ipv4.akahelp.net. "$@"
echo ""

echo "PowerDNS dualstack $@"
dig +short TXT whoami-ecs.lua.powerdns.org. "$@"
echo ""

echo "PowerDNS IPv6 $@"
dig +short TXT whoami-ecs.v6.powerdns.org. "$@"
echo ""

echo "PowerDNS IPv4 $@"
dig +short TXT whoami-ecs.v4.powerdns.org. "$@"
echo ""