Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [info] Aliases for Windows Updates that work in pfsense 2.2

    Scheduled Pinned Locked Moved General pfSense Questions
    1 Posts 1 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firewalluser
      last edited by

      As this thread is now locked https://forum.pfsense.org/index.php?topic=40691.0 [edit wrong link thread posted]

      These aliases work with pfsense 2.2rc

      microsoft.com
      download.microsoft.com
      ntservicepack.microsoft.com
      update.microsoft.com
      fe1.update.microsoft.com
      fe2.update.microsoft.com
      test.stats.update.microsoft.com
      windowsupdate.microsoft.com
      windowsupdate.com
      download.windowsupdate.com

      If you are running W7x32 or W7x64 (not tested vista, W8 or WSUS servers yet), all of the above will get you updates upto and including SP1, after that Windows updates will fail, adding fe1.update.microsoft.com and fe2.update.microsoft.com will get you the updates for W7 released after SP1.

      This link https://technet.microsoft.com/en-us/library/hh852346.aspx#BKM_ConfigureNetworkConnections also suggests  http://go.microsoft.com but I've yet to add this to the alias list and so far all up to date so might be relevant for other versions of windows and/or different version of WSUS.

      https://technet.microsoft.com/en-us/library/bb693717.aspx

      In case of any future problems, all I did to work out the fe1 & fe2 links which would be handled by the wildcard suggestions "*" seen in the MS technet links, was run a windows update, got the blocked ip's from the firewall log and then looked up the ip's in google which took me to a.b.c.d.ipaddress.com like http://191.232.80.60.ipaddress.com and http://191.234.72.186.ipaddress.com.

      The first link has no domain name associated with it but the second link showed it was associated with fe2.update.microsoft.com so I took a gamble and added fe1.update.microsoft.com which happens to exist and is 65.55.194.221 and can also be seen using http://fe1.update.microsoft.com.ipaddress.com/

      There will probably be other sites to help give ip address & domain name info so anyone knows of any better sites for quickly and easily looking up the ip and/or domain names feel free to post.

      fwiw.

      Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

      Asch Conformity, mainly the blind leading the blind.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.