We have in some locations (isolated) satellite internet with Tooway, in some places unlimited in other with limit.
The mikrotik are pretty well configurated, shapping, priority and everything but now, the windows 8/8.1 and 7 from the users are downloading automatically the Windows 10. Anybody knows how can we block the downloading of windows 10? Is there a Layer rule for the “Update”?
Thank you.
Poor people whose computers are going to run win10. Actually they paid to you for some traffic so why to inspect their data and block selectively what they can or cannot pass? How would you like the postman who reads your letters and decide which one is appropriate to deliver to your mailbox and which one is going to be dropped? Yeah. I know. Not an answer directly to your question. Sorry for that. I don’t know. Maybe you can make some additional queues by the Microsoft update servers and squeeze them to minimum…
Hello my friend. Thank you for your answer.
I will explain. They don´t pay me for traffic, I am not an ISP, but some examples…
I have a friend, she has SAT internet with 25 GB /month, I installed for her the Mikrotik, and AP with Ubiquiti PicoStation, and and ATA for VoIP.
I filtered the p2p in the day, and reduced some download speed in the days, because in the night the download is unlimited… unmetered, but… She is carefully in the day downloading… but… if the windows download itself the Windows 10, it destroys the allowance…
Other situation, 3 friends lives isolated and the have an “unlimited” tooway service (satellite), they are sharing the dish with an Ubiquiti 5.8 AP, and with the mikrotik they have a pcq queue and some controls for speed. But if you download SO much in short time, or long time, EutelSat (tooway administrator satellite service) put us in the FAP (slow download/upload speed because you are a heavy user).
The users are carefully… but Windows isn´t…
Me… I have also a “Unlimited” Sat service in my house, sharing with 8 friends.. The same… We pay together the invoce and the equipment, NO MORE, is a not profit service. I install and everything in my mikrotik (751).. is working well and they are very carefully… But the new windows 8.1 are downloading the windows 10, even is you don´t install it… it is downloading it…
It is also possible to disable auto updates and auto update downloads in Windows 10.
Yes, I know it, but the computer are not always the same, and think… if a familiar is coming to a house for stay the weekend…
A friend… somebody…
I can´t be asking everyday to all my friends… Is there a new computer? is a cousin, sister in law, etc etc coming to your house today? jajajaja
As I already said. Squeeze the queue to Microsoft servers. Or drop it.
Or link dns records to localhost and block usage of any other dns server than your router from the network.
You can add, the update extension for windows to add in filter rule, on advanced “content”
Action drop
Now all update for windows are drop
Thank to everyone, but… How can I get a FULL list for the Microsoft download servers and keep updated?
and remember, now the updates could be gotten from other users.
I think, still, the way is using layer7… But I am not an expert and I am asking hahahah
I disabled always in every place the DNS forward and redirect to “myself”, I have control about the DNS resolution…
Thank you…
I’m not using the Windows operating system, but I read that it downloads gigabytes of data for an update that users may not want, and it is very difficult or impossible to avoid it (there even is no “I don’t want this” button on the download popup, I read).
I’m amazed that Microsoft gets away with this, in a world where internet connectivity is not unlimited for lots of people.
E.g. with mobile internet there usually is a cap or a rate.
When was in such a situation I would try to arrange a group to make a class action against Microsoft and make them pay for the damages (both in traffic and in admin work to avoid it) for such an abomination. Maybe you can find a group to join who is already doing that?
Filtering the traffic will probably be impractical, everything is TLS these days and cannot be inspected in a router anymore.