Blokir Windows Update Menggunakan Mikrotik

Sep 26, 2021 | Mikrotik, tips

Pada Tutorial kali ini kita akan mencoba untuk memblok aktifitas Windows Update pada Windows 10 dengan menggunakan firewall Mikrotik. Seperti telah kita ketahui bahwa Microsoft rajin sekali melakukan update pada sistem operasi Windows 10. Apabila Windows update ini sedang berjalan, maka akan memakan bandwidth internet yang cukup besar sehingga aktifitas yang menggunakan internet lainnya seperti browsing atau Skype Meeting akan terganggu.

Untuk memblok Windows Update, dalam postingan saya ada 3 tips yang bisa anda pilih sesuai kebutuhan dan spesifikasi RB yang anda miliki :

  • block prerouting domain microsoft
/ip firewall raw
add action=drop chain=prerouting content=update.microsoft.com comment="Blocking Windows Update"
add action=drop chain=prerouting content=download.microsoft.com
add action=drop chain=prerouting content=download.windowsupdate.com
add action=drop chain=prerouting content=windowsupdate.com
add action=drop chain=prerouting content=wustat.windows.com
add action=drop chain=prerouting content=ntservicepack.microsoft.com
add action=drop chain=prerouting content=stats.microsoft.com
add action=drop chain=prerouting content=wustat.windows.com
add action=drop chain=prerouting content=windowsupdate.microsoft.com
  • block prerouting dan https domain microsoft
/ip firewall raw 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=windowsupdate.microsoft.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=download.microsoft.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=test.stats.update.microsoft.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=ntservicepack.microsoft.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=*.download.windowsupdate.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=*.update.microsoft.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=download.windowsupdate.com 
add action=drop chain=prerouting comment="Blok Windows Update" protocol=tcp tls-host=*.windowsupdate.microsoft.com
  • reject ip public dan domain microsoft
/ip firewall filter
add action=reject chain=forward comment=”Reject MS Telemetry” \
dst-address-list=MStelemetry reject-with=icmp-network-unreachable

/ip firewall address-list
add address=111.221.29.177 list=MStelemetry
add address=111.221.29.253 list=MStelemetry
add address=131.253.40.37 list=MStelemetry
add address=134.170.30.202 list=MStelemetry
add address=134.170.115.60 list=MStelemetry
add address=134.170.165.248 list=MStelemetry
add address=134.170.165.253 list=MStelemetry
add address=134.170.185.70 list=MStelemetry
add address=137.116.81.24 list=MStelemetry
add address=137.117.235.16 list=MStelemetry
add address=157.55.129.21 list=MStelemetry
add address=157.55.133.204 list=MStelemetry
add address=157.56.121.89 list=MStelemetry
add address=157.56.91.77 list=MStelemetry
add address=168.63.108.233 list=MStelemetry
add address=191.232.139.254 list=MStelemetry
add address=191.232.80.58 list=MStelemetry
add address=191.232.80.62 list=MStelemetry
add address=191.237.208.126 list=MStelemetry
add address=204.79.197.200 list=MStelemetry
add address=207.46.101.29 list=MStelemetry
add address=207.46.114.58 list=MStelemetry
add address=207.46.223.94 list=MStelemetry
add address=207.68.166.254 list=MStelemetry
add address=212.30.134.204 list=MStelemetry
add address=212.30.134.205 list=MStelemetry
add address=23.102.21.4 list=MStelemetry
add address=23.99.10.11 comment=”Listado de IP espias de Microsoft” list=MStelemetry
add address=23.218.212.69 list=MStelemetry
add address=64.4.54.22 list=MStelemetry
add address=64.4.54.32 list=MStelemetry
add address=64.4.6.100 list=MStelemetry
add address=65.39.117.230 list=MStelemetry
add address=65.52.100.11 list=MStelemetry
add address=65.52.100.7 list=MStelemetry
add address=65.52.100.9 list=MStelemetry
add address=65.52.100.91 list=MStelemetry
add address=65.52.100.92 list=MStelemetry
add address=65.52.100.93 list=MStelemetry
add address=65.52.100.94 list=MStelemetry
add address=65.52.108.29 list=MStelemetry
add address=65.55.108.23 list=MStelemetry
add address=65.55.138.114 list=MStelemetry
add address=65.55.138.126 list=MStelemetry
add address=65.55.138.186 list=MStelemetry
add address=65.55.252.63 list=MStelemetry
add address=65.55.252.71 list=MStelemetry
add address=65.55.252.92 list=MStelemetry
add address=65.55.252.93 list=MStelemetry
add address=65.55.29.238 list=MStelemetry
add address=65.55.39.10 list=MStelemetry
add address=191.232.139.2 list=MStelemetry
add address=64.4.23.0/24 list=MStelemetry
add address=111.221.64.0/18 list=MStelemetry
add address=157.55.235.0/24 list=MStelemetry
add address=157.55.56.0/24 list=MStelemetry
add address=157.55.52.0/24 list=MStelemetry
add address=157.55.130.0/24 list=MStelemetry
add address=65.55.223.0/24 list=MStelemetry
add address=213.199.179.0/24 list=MStelemetry
add address=195.138.255.0/24 list=MStelemetry
add address=65.55.44.108 list=MStelemetry
add address=23.212.108.0/24 list=MStelemetry
add address=64.4.0.0/18 list=MStelemetry
add address=65.52.0.0/14 list=MStelemetry
add address=111.221.29.0/24 list=MStelemetry
add address=157.56.91.77 list=MStelemetry
add address=168.61.0.0/16 list=MStelemetry
add address=168.62.0.0/15 list=MStelemetry
add address=131.253.0.0/16 list=MStelemetry
add address=134.170.0.0/16 list=MStelemetry
add address=137.116.0.0/16 list=MStelemetry
add address=137.117.0.0/16 list=MStelemetry
add address=157.54.0.0/15 list=MStelemetry
add address=157.60.0.0/16 list=MStelemetry
add address=161.69.0.0/16 list=MStelemetry
add address=178.255.0.0/16 list=MStelemetry
add address=191.232.0.0/14 list=MStelemetry
add address=191.236.0.0/14 list=MStelemetry
add address=199.166.0.0/16 list=MStelemetry
add address=204.79.0.0/16 list=MStelemetry
add address=23.102.0.0/16 list=MStelemetry
add address=23.203.0.0/16 list=MStelemetry
add address=23.45.0.0/16 list=MStelemetry
add address=23.96.0.0/13 list=MStelemetry
add address=23.99.0.0/16 list=MStelemetry
add address=64.20.0.0/16 list=MStelemetry
add address=69.172.0.0/16 list=MStelemetry
add address=74.125.0.0/16 list=MStelemetry
add address=93.184.0.0/16 list=MStelemetry
add address=vortex.data.microsoft.com list=MStelemetry
add address=vortex-win.data.microsoft.com list=MStelemetry
add address=telecommand.telemetry.microsoft.com list=MStelemetry
add address=telecommand.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=oca.telemetry.microsoft.com list=MStelemetry
add address=oca.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=sqm.telemetry.microsoft.com list=MStelemetry
add address=sqm.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=watson.telemetry.microsoft.com list=MStelemetry
add address=watson.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=redir.metaservices.microsoft.com list=MStelemetry
add address=choice.microsoft.com list=MStelemetry
add address=choice.microsoft.com.nsatc.net list=MStelemetry
add address=df.telemetry.microsoft.com list=MStelemetry
add address=reports.wes.df.telemetry.microsoft.com list=MStelemetry
add address=wes.df.telemetry.microsoft.com list=MStelemetry
add address=services.wes.df.telemetry.microsoft.com list=MStelemetry
add address=sqm.df.telemetry.microsoft.com list=MStelemetry
add address=telemetry.microsoft.com list=MStelemetry
add address=watson.ppe.telemetry.microsoft.com list=MStelemetry
add address=telemetry.appex.bing.net list=MStelemetry
add address=telemetry.urs.microsoft.com list=MStelemetry
add address=urs.microsoft.com list=MStelemetry
add address=bing.com list=MStelemetry
add address=telemetry.appex.bing.net list=MStelemetry
add address=settings-sandbox.data.microsoft.com list=MStelemetry
add address=vortex-sandbox.data.microsoft.com list=MStelemetry
add address=survey.watson.microsoft.com list=MStelemetry
add address=watson.live.com list=MStelemetry
add address=watson.microsoft.com list=MStelemetry
add address=statsfe2.ws.microsoft.com list=MStelemetry
add address=corpext.msitadfs.glbdns2.microsoft.com list=MStelemetry
add address=compatexchange.cloudapp.net list=MStelemetry
add address=cs1.wpc.v0cdn.net list=MStelemetry
add address=a-0001.a-msedge.net list=MStelemetry
add address=statsfe2.update.microsoft.com.akadns.net list=MStelemetry
add address=sls.update.microsoft.com.akadns.net list=MStelemetry
add address=fe2.update.microsoft.com.akadns.net list=MStelemetry
add address=diagnostics.support.microsoft.com list=MStelemetry
add address=corp.sts.microsoft.com list=MStelemetry
add address=statsfe1.ws.microsoft.com list=MStelemetry
add address=pre.footprintpredict.com list=MStelemetry
add address=i1.services.social.microsoft.com list=MStelemetry
add address=i1.services.social.microsoft.com.nsatc.net list=MStelemetry
add address=feedback.windows.com list=MStelemetry
add address=feedback.microsoft-hohm.com list=MStelemetry
add address=feedback.search.microsoft.com list=MStelemetry
add address=public-family.api.account.microsoft.com list=MStelemetry
add address=adnxs.com list=MStelemetry
add address=c.msn.com list=MStelemetry
add address=g.msn.com list=MStelemetry
add address=h1.msn.com list=MStelemetry
add address=msedge.net list=MStelemetry
add address=rad.msn.com list=MStelemetry
add address=ads.msn.com list=MStelemetry
add address=adnexus.net list=MStelemetry
add address=ac3.msn.com list=MStelemetry
add address=c.atdmt.com list=MStelemetry
add address=m.adnxs.com list=MStelemetry
add address=sO.2mdn.net list=MStelemetry
add address=ads1.msn.com list=MStelemetry
add address=ec.atdmt.com list=MStelemetry
add address=flex.msn.com list=MStelemetry
add address=rad.live.com list=MStelemetry
add address=ui.skype.com list=MStelemetry
add address=msftncsi.com list=MStelemetry
add address=a-msedge.net list=MStelemetry
add address=a.rad.msn.com list=MStelemetry
add address=b.rad.msn.com list=MStelemetry
add address=cdn.atdmt.com list=MStelemetry
add address=m.hotmail.com list=MStelemetry
add address=ads1.msads.net list=MStelemetry
add address=a.ads1.msn.com list=MStelemetry
add address=a.ads2.msn.com list=MStelemetry
add address=apps.skype.com list=MStelemetry
add address=b.ads1.msn.com list=MStelemetry
add address=view.atdmt.com list=MStelemetry
add address=preview.msn.com list=MStelemetry
add address=aidps.atdmt.com list=MStelemetry
add address=static.2mdn.net list=MStelemetry
add address=a.ads2.msads.net list=MStelemetry
add address=b.ads2.msads.net list=MStelemetry
add address=db3aqu.atdmt.com list=MStelemetry
add address=secure.adnxs.com list=MStelemetry
add address=www.msftncsi.com list=MStelemetry
add address=live.rads.msn.com list=MStelemetry
add address=ad.doubleclick.net list=MStelemetry
add address=bs.serving-sys.com list=MStelemetry
add address=pricelist.skype.com list=MStelemetry
add address=a-0002.a-msedge.net list=MStelemetry
add address=a-0003.a-msedge.net list=MStelemetry
add address=a-0004.a-msedge.net list=MStelemetry
add address=a-0005.a-msedge.net list=MStelemetry
add address=a-0006.a-msedge.net list=MStelemetry
add address=a-0007.a-msedge.net list=MStelemetry
add address=a-0008.a-msedge.net list=MStelemetry
add address=a-0009.a-msedge.net list=MStelemetry
add address=aka-cdn-ns.adtech.de list=MStelemetry
add address=cds26.ams9.msecn.net list=MStelemetry
add address=lb1.www.ms.akadns.net list=MStelemetry
add address=az361816.vo.msecnd.net list=MStelemetry
add address=az512334.vo.msecnd.net list=MStelemetry
add address=msntest.serving-sys.com list=MStelemetry
add address=secure.flashtalking.com list=MStelemetry
add address=s.gateway.messenger.live.com list=MStelemetry
add address=schemas.microsoft.akadns.net list=MStelemetry
add address=settings-win.data.microsoft.com list=MStelemetry
add address=msnbot-65-55-108-23.search.msn.com list=MStelemetry
add address=vortex-bn2.metron.live.com.nsatc.net list=MStelemetry
add address=vortex-cy2.metron.live.com.nsatc.net list=MStelemetry
add address=www.vortex.data.microsoft.com list=MStelemetry
add address=www.vortex-win.data.microsoft.com list=MStelemetry
add address=www.telecommand.telemetry.microsoft.com list=MStelemetry
add address=www.telecommand.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=www.oca.telemetry.microsoft.com list=MStelemetry
add address=www.oca.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=www.sqm.telemetry.microsoft.com list=MStelemetry
add address=www.sqm.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=www.watson.telemetry.microsoft.com list=MStelemetry
add address=www.watson.telemetry.microsoft.com.nsatc.net list=MStelemetry
add address=www.redir.metaservices.microsoft.com list=MStelemetry
add address=www.choice.microsoft.com list=MStelemetry
add address=www.choice.microsoft.com.nsatc.net list=MStelemetry
add address=www.df.telemetry.microsoft.com list=MStelemetry
add address=www.reports.wes.df.telemetry.microsoft.com list=MStelemetry
add address=www.wes.df.telemetry.microsoft.com list=MStelemetry
add address=www.services.wes.df.telemetry.microsoft.com list=MStelemetry
add address=www.sqm.df.telemetry.microsoft.com list=MStelemetry
add address=www.telemetry.microsoft.com list=MStelemetry
add address=www.watson.ppe.telemetry.microsoft.com list=MStelemetry
add address=www.telemetry.appex.bing.net list=MStelemetry
add address=www.telemetry.urs.microsoft.com list=MStelemetry
add address=www.urs.microsoft.com list=MStelemetry
add address=www.bing.com list=MStelemetry
add address=www.telemetry.appex.bing.net list=MStelemetry
add address=www.settings-sandbox.data.microsoft.com list=MStelemetry
add address=www.vortex-sandbox.data.microsoft.com list=MStelemetry
add address=www.survey.watson.microsoft.com list=MStelemetry
add address=www.watson.live.com list=MStelemetry
add address=www.watson.microsoft.com list=MStelemetry
add address=www.statsfe2.ws.microsoft.com list=MStelemetry
add address=www.corpext.msitadfs.glbdns2.microsoft.com list=MStelemetry
add address=www.compatexchange.cloudapp.net list=MStelemetry
add address=www.cs1.wpc.v0cdn.net list=MStelemetry
add address=www.a-0001.a-msedge.net list=MStelemetry
add address=www.statsfe2.update.microsoft.com.akadns.net list=MStelemetry
add address=www.sls.update.microsoft.com.akadns.net list=MStelemetry
add address=www.fe2.update.microsoft.com.akadns.net list=MStelemetry
add address=www.diagnostics.support.microsoft.com list=MStelemetry
add address=www.corp.sts.microsoft.com list=MStelemetry
add address=www.statsfe1.ws.microsoft.com list=MStelemetry
add address=www.pre.footprintpredict.com list=MStelemetry
add address=www.i1.services.social.microsoft.com list=MStelemetry
add address=www.i1.services.social.microsoft.com.nsatc.net list=MStelemetry
add address=www.feedback.windows.com list=MStelemetry
add address=www.feedback.microsoft-hohm.com list=MStelemetry
add address=www.feedback.search.microsoft.com list=MStelemetry
add address=www.public-family.api.account.microsoft.com list=MStelemetry
add address=www.adnxs.com list=MStelemetry
add address=www.c.msn.com list=MStelemetry
add address=www.g.msn.com list=MStelemetry
add address=www.h1.msn.com list=MStelemetry
add address=www.msedge.net list=MStelemetry
add address=www.rad.msn.com list=MStelemetry
add address=www.ads.msn.com list=MStelemetry
add address=www.adnexus.net list=MStelemetry
add address=www.ac3.msn.com list=MStelemetry
add address=www.c.atdmt.com list=MStelemetry
add address=www.m.adnxs.com list=MStelemetry
add address=www.sO.2mdn.net list=MStelemetry
add address=www.ads1.msn.com list=MStelemetry
add address=www.ec.atdmt.com list=MStelemetry
add address=www.flex.msn.com list=MStelemetry
add address=www.rad.live.com list=MStelemetry
add address=www.ui.skype.com list=MStelemetry
add address=www.msftncsi.com list=MStelemetry
add address=www.a-msedge.net list=MStelemetry
add address=www.a.rad.msn.com list=MStelemetry
add address=www.b.rad.msn.com list=MStelemetry
add address=www.cdn.atdmt.com list=MStelemetry
add address=www.m.hotmail.com list=MStelemetry
add address=www.ads1.msads.net list=MStelemetry
add address=www.a.ads1.msn.com list=MStelemetry
add address=www.a.ads2.msn.com list=MStelemetry
add address=www.apps.skype.com list=MStelemetry
add address=www.b.ads1.msn.com list=MStelemetry
add address=www.view.atdmt.com list=MStelemetry
add address=www.preview.msn.com list=MStelemetry
add address=www.aidps.atdmt.com list=MStelemetry
add address=www.static.2mdn.net list=MStelemetry
add address=www.a.ads2.msads.net list=MStelemetry
add address=www.b.ads2.msads.net list=MStelemetry
add address=www.db3aqu.atdmt.com list=MStelemetry
add address=www.secure.adnxs.com list=MStelemetry
add address=www.www.msftncsi.com list=MStelemetry
add address=www.live.rads.msn.com list=MStelemetry
add address=www.ad.doubleclick.net list=MStelemetry
add address=www.bs.serving-sys.com list=MStelemetry
add address=www.pricelist.skype.com list=MStelemetry
add address=www.a-0002.a-msedge.net list=MStelemetry
add address=www.a-0003.a-msedge.net list=MStelemetry
add address=www.a-0004.a-msedge.net list=MStelemetry
add address=www.a-0005.a-msedge.net list=MStelemetry
add address=www.a-0006.a-msedge.net list=MStelemetry
add address=www.a-0007.a-msedge.net list=MStelemetry
add address=www.a-0008.a-msedge.net list=MStelemetry
add address=www.a-0009.a-msedge.net list=MStelemetry
add address=www.aka-cdn-ns.adtech.de list=MStelemetry
add address=www.cds26.ams9.msecn.net list=MStelemetry
add address=www.lb1.www.ms.akadns.net list=MStelemetry
add address=www.az361816.vo.msecnd.net list=MStelemetry
add address=www.az512334.vo.msecnd.net list=MStelemetry
add address=www.msntest.serving-sys.com list=MStelemetry
add address=www.secure.flashtalking.com list=MStelemetry
add address=www.s.gateway.messenger.live.com list=MStelemetry
add address=www.schemas.microsoft.akadns.net list=MStelemetry
add address=www.settings-win.data.microsoft.com list=MStelemetry
add address=www.msnbot-65-55-108-23.search.msn.com list=MStelemetry
add address=www.vortex-bn2.metron.live.com.nsatc.net list=MStelemetry
add address=www.vortex-cy2.metron.live.com.nsatc.net list=MStelemetry

Demikianlah Tips cara memblok windows update dengan menggunakan mikrotik firewall. Apabila di tampilan firewall raw seperti diatas tidak ada aktifitas paket, sedangkan windows update di komputer tetap jalan, maka harus dicek lagi, kemungkinan website windows update sudah ada perubahan.