Educause Security Discussion mailing list archives

Re: Blocking Access to Windows Update


From: RLVaughn <Randy_Vaughn () BAYLOR EDU>
Date: Tue, 12 Oct 2004 17:59:10 -0500

Hello Ron,

You can use DNSKong as a pseudo-DNS server for the boxes.  Just add the site
name to DNSKong's named.txt
<http://pyrenean.com/betatest/beta.htm>

Tuesday, October 12, 2004, 4:04:03 PM, you wrote:
---------
We have a little problem. Apparently one or more of our lab software
images is not set correctly to contact our campus SUS server rather than
going to Microsoft. These labs all use Deep Freeze so they keep
downloading service packs and Windows updates that are never installed,
every day, over and over. This is generating a huge amount of network
traffic over our internet links. Do any of you have a list of IP
addresses, an ACL or a BGP config that will block access to the Windows
update servers while we figure this out? I've been fighting this all day
and it seems like every time I block a server address, another one pops
up.

--
Ron Parker, Director of Information Technology, Brazosport College
Voice: (979) 230-3480             FAX: (979) 230-3111
http://www.brazosport.edu

**********
Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/groups/.

---------



Best regards,

Randal Vaughn
Professor
Baylor University

mailto:Randy_Vaughn () Baylor edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: