At the very least, $$ access to the organization's Domain Name System $($DNS$)$ server should be blocked to prevent illegal zone transfers and to prevent attackers from taking down the organization's entire network.

$$