Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use a company laptop for work. Usually, I work from a client site. Recently, this client has prohibited the use of its Internet Access from 3rd party. So we switched to a 3G modem + hub as a solution.

However, my company laptop, which runs Windows 7, is configure to automatically download updates. From what I gather, only updates that have been approved by our own company. Either way, I cannot interfere in the process, since it's enforced by a rule.

What I'd like to do is to insert some rule into the 3G's router built-in firewall. Is it possible? Does Windows Update have some main IP that I can block? Or maybe could I block it through a domain name?

share|improve this question
What do you want the rule to do? – soandos Nov 30 '11 at 19:48
@soandos, block any traffic to and from Windows Update services. – Bruno Brant Nov 30 '11 at 20:32
Out of curiosity, have you talked to your IT department? Do they want you to get these updates? Because if so, changing the hosts file will prevent you from getting them ever. – soandos Nov 30 '11 at 20:36
@soandos, no, I don't want to never get the updates, just to stop then from coming when using my 3G connection, that's why I want block then in the 3G router. The address below in SaintWacko answer was all I needed. Thanks! – Bruno Brant Dec 5 '11 at 12:57
up vote 4 down vote accepted

Windows Update constantly changes its IP address, so you'd have to block out a massive range of IPs to prevent it. If your firewall supports DNS blocking, block out these hosts:

If it does not support DNS blocking, try editing your hosts file to point those hosts to That should prevent them from getting updates.

share|improve this answer
I can't yet comment on the main question, so I'll clarify here. Editing the hosts file will prevent you from getting the updates, but not forever. You can easily re-enable the updates by deleting or commenting out the lines setting the hosts to This will make your computer go back to asking the DNS server for the IP addresses. – SaintWacko Nov 30 '11 at 20:41
Let me know how this works for you. – SaintWacko Dec 1 '11 at 7:39
sorry I didn't commented about it early. Your answer was EXACTLY what I was looking for; I can block these in my 3G router. I knew how to do it, I just didn't know which address to block. – Bruno Brant Dec 5 '11 at 12:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .