+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, Need to blacklist windows updates on 8e6 in Technical; I work in a school's IT department. Recently windows automatic updates have been blowing up our allotted bandwidth. We have ...
  1. #1

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Need to blacklist windows updates on 8e6

    I work in a school's IT department. Recently windows automatic updates have been blowing up our allotted bandwidth. We have decided to blacklist/block windows updates on a mass scale by simply adding it to our blacklist in our 8e6 filter. The problem we have is that we're not sure what ip/url to use to block the updates. Sure, we could go computer to computer turning the automatic updates off but when you have over 500 computers, that's kind of time consuming. Thanks!

  2. #2
    AJT1's Avatar
    Join Date
    Nov 2007
    Location
    North East
    Posts
    83
    Thank Post
    13
    Thanked 5 Times in 5 Posts
    Rep Power
    15
    Why don't you introduce something like WSUS to keep your computers up to date?

    It would be far safer than not updating your pc's at all.

  3. #3

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,859
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    +1 for WSUS. Not permitting updates isn't really a long-term solution.

  4. #4
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,035
    Thank Post
    305
    Thanked 293 Times in 203 Posts
    Rep Power
    120
    Or turn them off in group policy

  5. #5

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499
    Another for WSUS...

    Also means your PCs update quicker too..

  6. #6

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    11,210
    Thank Post
    1,809
    Thanked 2,223 Times in 1,641 Posts
    Rep Power
    803
    Quote Originally Posted by timbo343 View Post
    Or turn them off in group policy
    Quote Originally Posted by AJT1 View Post
    Why don't you introduce something like WSUS to keep your computers up to date?

    It would be far safer than not updating your pc's at all.
    Do both! Far and away the best thing to do

  7. #7


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 850 Times in 672 Posts
    Rep Power
    196
    You may be able to lower the bandwidth allocated to windows updates if you are talking non-domain PCs.
    Turning em off would be, as others have said, mental

  8. #8

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    We have the updates taken care of...they'll still get their updates through another program we use. But I need to know what either the IP or URL is where the updates come from. Thanks for your help all!

  9. #9
    somabc's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    2,337
    Thank Post
    83
    Thanked 388 Times in 258 Posts
    Rep Power
    112
    Yeah right this is a joke isn't? To save costs on Power I am going to randomly turn 20% of my PC's off during the day, think of the money I'll save!

    You are going to turn off Windows Updates to save bandwidth. How much bandwidth do you think you will save when your machines are pumping out spam?

    You have 500 PC's downloading each update, why not have 1? Use WSUS you download each update ONCE then deploy it to each machine. It is the most efficient method and lets you use reporting to see which updates are installed on which machines.
    Last edited by somabc; 14th November 2008 at 05:34 PM.

  10. #10

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Oh yeah, we're running Novell 4.91 / XP Pro.

  11. #11

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    We have a program which does what WSUS does...all I'm asking is if Automatic Updates has an IP address. Our computers will STILL be getting the updates just via another channel.

  12. #12
    somabc's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    2,337
    Thank Post
    83
    Thanked 388 Times in 258 Posts
    Rep Power
    112
    Quote Originally Posted by juventus View Post
    Oh yeah, we're running Novell 4.91 / XP Pro.
    There's your problem!

  13. #13

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Can anyone actually answer my question or do you all just want to hack at me for asking this question? If there's no answer, fine, tell me.

  14. #14
    somabc's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    2,337
    Thank Post
    83
    Thanked 388 Times in 258 Posts
    Rep Power
    112
    ok ok, its just you should have mentioned novell in your first post.

    you can try blocking a248.e.akamai.net

    requests for Microsoft Corporation no longer resolve to machines on Microsoft’s own network, but instead are handled by the Akamai caching system and the actual Akamai server you connect to will differ according to your location on the internet and may vary from request to request.

    So difficult to block.

    Code:
    telnet update.microsoft.com http
    Trying 65.55.184.29...
    Connected to update.microsoft.com.nsatc.net.
    Code:
    update.microsoft.com.           IN      A
    
    ANSWER SECTION:
    update.microsoft.com.   3600    IN      CNAME
    update.microsoft.com.nsatc.net.
    update.microsoft.com.nsatc.net. 300     IN      CNAME
    www.update.microsoft.com.
    www.update.microsoft.com. 804     IN      CNAME
    www.update.microsoft.com.nsatc.net.
    www.update.microsoft.com.nsatc.net. 55      IN      A       65.55.200.157
    nsatc.net
    Last edited by somabc; 14th November 2008 at 07:06 PM.

  15. #15

    Join Date
    Nov 2008
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I didn't even think to include it since I wasn't asking about my network...I was only asking what the IP/URL was for automatic updates. Thanks for the answer.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Endian Firewall and Windows Updates
    By Craig_W in forum *nix
    Replies: 7
    Last Post: 6th December 2011, 03:05 PM
  2. Last Nights Windows Updates!
    By m25man in forum Windows
    Replies: 19
    Last Post: 12th October 2007, 11:51 PM
  3. IE7 gone from Windows Updates.
    By eejit in forum Windows
    Replies: 5
    Last Post: 22nd February 2007, 03:52 PM
  4. Windows Updates
    By nawbus in forum Windows
    Replies: 11
    Last Post: 8th November 2005, 12:31 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •