9

I use a company laptop for work. Usually, I work from a client site. Recently, this client has prohibited the use of its Internet Access from 3rd party. So we switched to a 3G modem + hub as a solution.

However, my company laptop, which runs Windows 7, is configure to automatically download updates. From what I gather, only updates that have been approved by our own company. Either way, I cannot interfere in the process, since it's enforced by a rule.

What I'd like to do is to insert some rule into the 3G's router built-in firewall. Is it possible? Does Windows Update have some main IP that I can block? Or maybe could I block it through a domain name?

Improve this question
4
  • What do you want the rule to do?
    – soandos
    Nov 30 '11 at 19:48
  • @soandos, block any traffic to and from Windows Update services.
    – Bruno Brant
    Nov 30 '11 at 20:32
  • Out of curiosity, have you talked to your IT department? Do they want you to get these updates? Because if so, changing the hosts file will prevent you from getting them ever.
    – soandos
    Nov 30 '11 at 20:36
  • @soandos, no, I don't want to never get the updates, just to stop then from coming when using my 3G connection, that's why I want block then in the 3G router. The address below in SaintWacko answer was all I needed. Thanks!
    – Bruno Brant
    Dec 5 '11 at 12:57
12

Windows Update constantly changes its IP address, so you'd have to block out a massive range of IPs to prevent it. If your firewall supports DNS blocking, block out these hosts:

http://windowsupdate.microsoft.com
http://*.windowsupdate.microsoft.com
https://*.windowsupdate.microsoft.com
http://*.update.microsoft.com
https://*.update.microsoft.com
http://*.windowsupdate.com
http://download.windowsupdate.com
http://download.microsoft.com
http://*.download.windowsupdate.com
http://wustat.windows.com
http://ntservicepack.microsoft.com
http://stats.microsoft.com
https://stats.microsoft.com

If it does not support DNS blocking, try editing your hosts file to point those hosts to 0.0.0.0. That should prevent them from getting updates.

Microsoft now keeps lists at:

Improve this answer
3
  • I can't yet comment on the main question, so I'll clarify here. Editing the hosts file will prevent you from getting the updates, but not forever. You can easily re-enable the updates by deleting or commenting out the lines setting the hosts to 0.0.0.0. This will make your computer go back to asking the DNS server for the IP addresses.
    – SaintWacko
    Nov 30 '11 at 20:41
  • Let me know how this works for you.
    – SaintWacko
    Dec 1 '11 at 7:39
  • sorry I didn't commented about it early. Your answer was EXACTLY what I was looking for; I can block these in my 3G router. I knew how to do it, I just didn't know which address to block.
    – Bruno Brant
    Dec 5 '11 at 12:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.