Educause Security Discussion mailing list archives
Re: Blocking Access to Windows Update
From: Scott Wimer <scottw () CYLANT COM>
Date: Tue, 12 Oct 2004 17:15:19 -0400
One thing you can do is create a local DNS or lmhosts record for the windows update main site. On Tue, 2004-10-12 at 17:04, Ron Parker wrote:
We have a little problem. Apparently one or more of our lab software images is not set correctly to contact our campus SUS server rather than going to Microsoft. These labs all use Deep Freeze so they keep downloading service packs and Windows updates that are never installed, every day, over and over. This is generating a huge amount of network traffic over our internet links. Do any of you have a list of IP addresses, an ACL or a BGP config that will block access to the Windows update servers while we figure this out? I've been fighting this all day and it seems like every time I block a server address, another one pops up. -- Ron Parker, Director of Information Technology, Brazosport College Voice: (979) 230-3480 FAX: (979) 230-3111 http://www.brazosport.edu ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
-- Scott M. Wimer Cylant www.cylant.com 91 Hartwell Ave v. (781) 402-0005 x238 Lexington, MA 02421 c. (781) 552-9525 There is no Security without Control. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Blocking Access to Windows Update Ron Parker (Oct 12)
- <Possible follow-ups>
- Re: Blocking Access to Windows Update Scott Wimer (Oct 12)
- Re: Blocking Access to Windows Update RLVaughn (Oct 12)