Browse Source

block telemetry related IP address via firewall

ref #6
pull/9/merge
Alex Hirsch 9 years ago
parent
commit
8a01cf3f07
  1. 104
      res/telemetry-hosts.txt
  2. 18
      scripts/disable-telemetry.ps1

104
res/telemetry-hosts.txt

@ -1,52 +1,52 @@
0.0.0.0 134.170.30.202 134.170.30.202
0.0.0.0 137.116.81.24 137.116.81.24
0.0.0.0 204.79.197.200 204.79.197.200
0.0.0.0 23.218.212.69 23.218.212.69
0.0.0.0 23.218.212.69 23.218.212.69
0.0.0.0 65.39.117.230 65.39.117.230
0.0.0.0 65.55.108.23 65.55.108.23
0.0.0.0 a-0001.a-msedge.net a-0001.a-msedge.net
0.0.0.0 choice.microsoft.com choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net choice.microsoft.com.nsatc.net
0.0.0.0 compatexchange.cloudapp.net compatexchange.cloudapp.net
0.0.0.0 corp.sts.microsoft.com corp.sts.microsoft.com
0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com corpext.msitadfs.glbdns2.microsoft.com
0.0.0.0 cs1.wpc.v0cdn.net cs1.wpc.v0cdn.net
0.0.0.0 df.telemetry.microsoft.com df.telemetry.microsoft.com
0.0.0.0 diagnostics.support.microsoft.com diagnostics.support.microsoft.com
0.0.0.0 fe2.update.microsoft.com.akadns.net fe2.update.microsoft.com.akadns.net
0.0.0.0 feedback.microsoft-hohm.com feedback.microsoft-hohm.com
0.0.0.0 feedback.search.microsoft.com feedback.search.microsoft.com
0.0.0.0 feedback.windows.com feedback.windows.com
0.0.0.0 i1.services.social.microsoft.com i1.services.social.microsoft.com
0.0.0.0 i1.services.social.microsoft.com.nsatc.net i1.services.social.microsoft.com.nsatc.net
0.0.0.0 oca.telemetry.microsoft.com oca.telemetry.microsoft.com
0.0.0.0 oca.telemetry.microsoft.com.nsatc.net oca.telemetry.microsoft.com.nsatc.net
0.0.0.0 pre.footprintpredict.com pre.footprintpredict.com
0.0.0.0 redir.metaservices.microsoft.com redir.metaservices.microsoft.com
0.0.0.0 reports.wes.df.telemetry.microsoft.com reports.wes.df.telemetry.microsoft.com
0.0.0.0 services.wes.df.telemetry.microsoft.com services.wes.df.telemetry.microsoft.com
0.0.0.0 settings-sandbox.data.microsoft.com settings-sandbox.data.microsoft.com
0.0.0.0 sls.update.microsoft.com.akadns.net sls.update.microsoft.com.akadns.net
0.0.0.0 sqm.df.telemetry.microsoft.com sqm.df.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 statsfe1.ws.microsoft.com statsfe1.ws.microsoft.com
0.0.0.0 statsfe2.update.microsoft.com.akadns.net statsfe2.update.microsoft.com.akadns.net
0.0.0.0 statsfe2.ws.microsoft.com statsfe2.ws.microsoft.com
0.0.0.0 survey.watson.microsoft.com survey.watson.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 telemetry.appex.bing.net telemetry.appex.bing.net
0.0.0.0 telemetry.appex.bing.net:443 telemetry.appex.bing.net:443
0.0.0.0 telemetry.microsoft.com telemetry.microsoft.com
0.0.0.0 telemetry.urs.microsoft.com telemetry.urs.microsoft.com
0.0.0.0 vortex-sandbox.data.microsoft.com vortex-sandbox.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com vortex-win.data.microsoft.com
0.0.0.0 vortex.data.microsoft.com vortex.data.microsoft.com
0.0.0.0 watson.live.com watson.live.com
0.0.0.0 watson.microsoft.com watson.microsoft.com
0.0.0.0 watson.ppe.telemetry.microsoft.com watson.ppe.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 wes.df.telemetry.microsoft.com wes.df.telemetry.microsoft.com

18
scripts/disable-telemetry.ps1

@ -4,8 +4,22 @@
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\reg-helper.psm1 Import-Module -DisableNameChecking $PSScriptRoot\..\lib\reg-helper.psm1
echo "Adding telemetry routes to hosts file" echo "Adding telemetry domains to hosts file"
cat "$PSScriptRoot\..\res\telemetry-hosts.txt" >> "$env:systemroot\System32\drivers\etc\hosts" $hosts = cat "$PSScriptRoot\..\res\telemetry-hosts.txt"
[ipaddress[]] $ips = @()
foreach ($h in $hosts) {
try {
# store for next part
$ips += [ipaddress]$h
} catch [System.InvalidCastException] {
# can be redirected by hosts
echo "0.0.0.0 $h" >> "$env:systemroot\System32\drivers\etc\hosts"
}
}
echo "Adding telemetry ips to firewall"
New-NetFirewallRule -DisplayName "Block Telemetry IPs" -Direction Outbound `
-Action Block -RemoteAddress ([string[]]$ips)
echo "Disabling telemetry via Group Policies" echo "Disabling telemetry via Group Policies"
Import-Registry(@" Import-Registry(@"

Loading…
Cancel
Save