[Discuss] DNS question about DNSENUM.PL

[Rich Pieri]

--On Tuesday, March 26, 2013 10:21 AM -0400 Chris O'Connell 
<omegahalo at gmail.com> wrote:

> Thanks for taking the time to explain all of that.  What I've found is
> that most of the address I can find are A, MX .  As a result, when I run a
> DNSENUM against my domain externally most A records that point to our IP
> addresses.

That's normal. That's what A records are.

> Obviously I would like to hide these (especially ones like
> remote.blah.org and vpn.blah.org).

You can't hide DNS records. DNS is public information. Everyone can see it. 
If you don't want a host name published then don't publish it. But then 
NOBODY can find the host's IP address including your own users. It's all or 
nothing.

Get the DNS cricket book.
<http://shop.oreilly.com/product/9780596100575.do>
Get it. Read the first few chapters.

-- 
Rich P.