# Blocking Windows and Apple updates **URL:** \ **Category:** Installing and Using OpenWrt\ **Created:** [June 4, 2021, 9:48am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299 "2021-06-04T09:48:44Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ReeX](https://forum.openwrt.org/letter_avatar/reex/32/5_5575768a8748004e209b776fc1b2916d.png) [@ReeX](https://forum.openwrt.org/u/ReeX)\ **Post date:** [June 4, 2021, 9:48am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/1 "2021-06-04T09:48:44Z")
Hi there, what is the suggested method to block windows & apple updates on OpenWRT? I have a list of well-known URLs which could be used for this... Got this, but might be outdated [Blocking websites on your router](https://forum.openwrt.org/t/blocking-websites-on-your-router/26705) ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [June 4, 2021, 9:52am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/2 "2021-06-04T09:52:41Z")
find a list of IPs hosting those services and block them in the firewall or banip. or find a list of hosts for the same services, and block them using your own DNS. ---
**Author:** ![ReeX](https://forum.openwrt.org/letter_avatar/reex/32/5_5575768a8748004e209b776fc1b2916d.png) [@ReeX](https://forum.openwrt.org/u/ReeX)\ **Post date:** [June 4, 2021, 10:10am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/3 "2021-06-04T10:10:49Z")
IPs might change at anytime, while the DNS being used is Google... ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [June 4, 2021, 10:11am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/4 "2021-06-04T10:11:38Z")
correct. but as long as you don't control the DNS, you can't stop them, by any other means than IP. pretty sure the banip is able to refresh the host-\>IP list - [banIP support thread](https://forum.openwrt.org/t/banip-support-thread/16985) external DNS traffic can be blocked or rerouted, if you mean they're using non-local DNS. and they will always be able to update while not connected to your LAN. but at least in windows you should be able to disable updates. ---
**Author:** ![flygarn12](https://forum.openwrt.org/user_avatar/forum.openwrt.org/flygarn12/32/57396_2.png) [@flygarn12](https://forum.openwrt.org/u/flygarn12)\ **Post date:** [June 4, 2021, 10:24am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/5 "2021-06-04T10:24:43Z")
Good luck with stopping Apple. If you wait long enought (a year) it will be forced installed at what ever network if finds and unless you live in a cave it will find some internet somewhere. If you block Win 10 and Microsoft you will probably have other problems after a while since the subcription demands server uplink to verify the license for piracy protection and if the computer is offline to long it will get blocked until verified. ---
**Author:** ![ReeX](https://forum.openwrt.org/letter_avatar/reex/32/5_5575768a8748004e209b776fc1b2916d.png) [@ReeX](https://forum.openwrt.org/u/ReeX)\ **Post date:** [June 4, 2021, 11:24am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/6 "2021-06-04T11:24:29Z")
At work we block: - [mesu.apple.com](http://mesu.apple.com) - [appldnld.apple.com](http://appldnld.apple.com) - [itunes.apple.com](http://itunes.apple.com) - [albert.apple.com](http://albert.apple.com) - [gs.apple.com](http://gs.apple.com) - [phobos.apple.com.edgesuite.net](http://phobos.apple.com.edgesuite.net) - [phobos.apple.com](http://phobos.apple.com) - [icloud.apple-dns.net](http://icloud.apple-dns.net) - [ntservicepack.microsoft.com](http://ntservicepack.microsoft.com) - [windows.com](http://windows.com) - [a-msedge.net](http://a-msedge.net) - [windowsupdate.com](http://windowsupdate.com) - [update.microsoft.com](http://update.microsoft.com) - [ws.microsoft.com](http://ws.microsoft.com) - [wustat.windows.com](http://wustat.windows.com) - [live.com](http://live.com) Seems to be working...while with OpenWRT we want to block updates through a slow connection used on holidays! ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [June 4, 2021, 11:26am UTC](https://forum.openwrt.org/t/blocking-windows-and-apple-updates/98299/7 "2021-06-04T11:26:22Z")
well, you've already gotten your answer. Block the IPs belonging to those sites, or set up your own DNS, and block the DNS names.