Sign in with
Sign up | Sign in
Your question

IP range for Win update servers?

Tags:
  • IP
  • Windows Update
  • Microsoft
  • Servers
  • Windows XP
Last response: in Windows XP
Share
Anonymous
January 13, 2005 1:53:03 PM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

What IP addresses must I allow access to so that clients behind the firewall
can access all windows update servers?

More about : range win update servers

Anonymous
January 14, 2005 1:21:17 AM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

cola8d8 wrote:

> What IP addresses must I allow access to so that clients
> behind the firewall can access all windows update servers?
Hi

Take a look at the post in the link below on how to configure
Norton Firewall to let Windows Updates through:

http://groups.google.co.uk/groups?selm=204689D3-6A2E-4F...

Essensially:

Permit communications with

download.windowsupdate.com
v5.windowsupdate.microsoft.com

on ports 80 and 443 (TCP and UDP)



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.m...
Anonymous
January 14, 2005 1:21:18 AM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Thanks for the info but I was really needing IP addresses (or range(s)) for
my firewall. Those DNS names reflect multiple IP addresses.

"Torgeir Bakken (MVP)" wrote:

> cola8d8 wrote:
>
> > What IP addresses must I allow access to so that clients
> > behind the firewall can access all windows update servers?
> Hi
>
> Take a look at the post in the link below on how to configure
> Norton Firewall to let Windows Updates through:
>
> http://groups.google.co.uk/groups?selm=204689D3-6A2E-4F...
>
> Essensially:
>
> Permit communications with
>
> download.windowsupdate.com
> v5.windowsupdate.microsoft.com
>
> on ports 80 and 443 (TCP and UDP)
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.m...
>
Related resources
Anonymous
January 14, 2005 1:21:18 AM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Thanks for the info but I was needing IP addresses (or range(s)) for my
firewall. Those DNS names translate to multiple IP addresses.

"Torgeir Bakken (MVP)" wrote:

> cola8d8 wrote:
>
> > What IP addresses must I allow access to so that clients
> > behind the firewall can access all windows update servers?
> Hi
>
> Take a look at the post in the link below on how to configure
> Norton Firewall to let Windows Updates through:
>
> http://groups.google.co.uk/groups?selm=204689D3-6A2E-4F...
>
> Essensially:
>
> Permit communications with
>
> download.windowsupdate.com
> v5.windowsupdate.microsoft.com
>
> on ports 80 and 443 (TCP and UDP)
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.m...
>
Anonymous
January 14, 2005 1:21:19 AM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"cola8d8" <cola8d8@discussions.microsoft.com> wrote in message
news:EEC6BD66-0B92-4549-A9F2-3FEC6020E27B@microsoft.com...
> Thanks for the info but I was needing IP addresses (or range(s)) for my
> firewall. Those DNS names translate to multiple IP addresses.
>
>

That's because Microsoft uses some 3rd party 'load balancing' companies that
have servers all over the place, on multiple subnets. It's to minimize
spikes due to popular downloads or DDoS attacks. I guess you could put in
every IP that currently resolves to those DNS names, but of course this
could change on a regular basis and it's possible that these hosting
companies don't even notify Microsoft (since Microsoft has contracted it
out.)

One idea for you is to deploy SUS... which basically lets you have your own
Windows Update Server (while also giving you some control over which patches
get deployed.) Of course, your SUS server would need to be able to talk to
the Microsoft servers but you could just stick that box in a DMZ.


--
Colin Nash
Microsoft MVP
Windows Shell/User
Anonymous
January 14, 2005 1:21:20 AM

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"Colin Nash [MVP]" <cnash x@x mvps.org> wrote in message
news:%23yoO2Wd%23EHA.792@TK2MSFTNGP11.phx.gbl...
> One idea for you is to deploy SUS...



Sorry... meant to include this URL for info about SUS:
http://www.microsoft.com/windowsserversystem/sus/defaul...
!