topic Re: I need IP range of microsoft windows update server in Operating System - Microsoft

I need IP range of microsoft windows update server

'chris' — Sat, 06 Aug 2005 08:06:33 GMT

hi

I need IP range of microsoft online update servers to allow ActiveX at our firewall.

on my firewall box (watchguard) I cannot setup any DNS names.

kind regards
chris

Re: I need IP range of microsoft windows update server

Steven Clementi — Wed, 04 Nov 2020 04:06:30 GMT

Chris:

Thats hard to say. Microsoft has LOTS of IP ranges.

If you ping windowsupdate.microsoft.com, you get something in the 207.46.x.x range. They have the whole range... 207.46.0.0 - 207.46.255.255

Click here for a bigger listing of ranges they use or have access to... https://answers.microsoft.com/en-us/windows/forum/windows_other-networking/need-windows-update-servers-ip-address-range-to/0b0d3618-f74c-411d-bb46-58bd605f7abe

I am pretty sure Windows Update always comes from that specific range though... 207.46.x.x, but could be wrong.

Steven

[Note: broken link removed by Mod]

Re: I need IP range of microsoft windows update server

'chris' — Sat, 06 Aug 2005 12:02:21 GMT

hi

I've tried with 207.46.0.0 - 207.46.255.255
and it doesn't work.

but if I try to put in addition:
213.19.0.0 - 213.19.255.255
and
212.73.0.0 - 212.73.255.255
then it works well.

that's very strange and hard to understand, because there are not MS ranges.

greetings
chris

Re: I need IP range of microsoft windows update server

Steven Clementi — Sat, 06 Aug 2005 12:38:17 GMT

Those are RIPE netblocks. Your incoming traffic might be passing through them. Thats the only thing I can think of.

http://www.ripe.net

What is your external IP? or IP block? Obviously you do not need to disclose if you rather not. It's understood without question.

Steven

Re: I need IP range of microsoft windows update server

David Frankham — Thu, 11 Aug 2005 21:50:33 GMT

I assume you are trying to allow Windows Update connections to your workstations? Have you seen Microsoft's free Software Update Service (SUS) and Windows Server Update Service products?

http://www.microsoft.com/windowsserversystem/updateservices/evaluation/previous/default.mspx

http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

Both of these services allow you to use a server (or many) on your network to download the patches and updates from MS Windows Update and distribute them automaticaly to your Windows clients.

See also Shavlik's HFNetChk product (not-free)(http://www.shavlik.com/hfnetchk-windows.aspx)

Anthony Cross