Educause Security Discussion mailing list archives
Re: Blocking Access to Windows Update
From: RLVaughn <Randy_Vaughn () BAYLOR EDU>
Date: Tue, 12 Oct 2004 17:59:10 -0500
Hello Ron, You can use DNSKong as a pseudo-DNS server for the boxes. Just add the site name to DNSKong's named.txt <http://pyrenean.com/betatest/beta.htm> Tuesday, October 12, 2004, 4:04:03 PM, you wrote: ---------
We have a little problem. Apparently one or more of our lab software images is not set correctly to contact our campus SUS server rather than going to Microsoft. These labs all use Deep Freeze so they keep downloading service packs and Windows updates that are never installed, every day, over and over. This is generating a huge amount of network traffic over our internet links. Do any of you have a list of IP addresses, an ACL or a BGP config that will block access to the Windows update servers while we figure this out? I've been fighting this all day and it seems like every time I block a server address, another one pops up.
-- Ron Parker, Director of Information Technology, Brazosport College Voice: (979) 230-3480 FAX: (979) 230-3111 http://www.brazosport.edu
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
--------- Best regards, Randal Vaughn Professor Baylor University mailto:Randy_Vaughn () Baylor edu ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Blocking Access to Windows Update Ron Parker (Oct 12)
- <Possible follow-ups>
- Re: Blocking Access to Windows Update Scott Wimer (Oct 12)
- Re: Blocking Access to Windows Update RLVaughn (Oct 12)