Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/schrebra/Windows.10.DNS.Block.List
Windows DNS Block List
https://github.com/schrebra/Windows.10.DNS.Block.List
block blocker blocklist debloat dns dns-server hostfile hosts pfsense pihole pihole-blocklists privacy spy telemetry window-10 windows windows-10 windows-11 windows10
Last synced: 1 day ago
JSON representation
Windows DNS Block List
- Host: GitHub
- URL: https://github.com/schrebra/Windows.10.DNS.Block.List
- Owner: schrebra
- Created: 2021-03-17T17:41:52.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-01-03T00:44:40.000Z (11 months ago)
- Last Synced: 2024-10-30T08:56:57.865Z (18 days ago)
- Topics: block, blocker, blocklist, debloat, dns, dns-server, hostfile, hosts, pfsense, pihole, pihole-blocklists, privacy, spy, telemetry, window-10, windows, windows-10, windows-11, windows10
- Language: PowerShell
- Homepage:
- Size: 231 KB
- Stars: 72
- Watchers: 6
- Forks: 9
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-windows-privacy - windows10.dns.list - Block everything Windows 10. (Misc)
README
# DNS Block List for Windows [](https://hits.seeyoufarm.com)
**The Largest List of Windows hosts**
This is an exhaustive list of all Windows DNS names that call back to Microsoft or third party applications builtin to the Operating System.
Created script to help configure Microsoft blocking and unblocking.
## Core Functions
### 1. Access Control
- Requires administrator privileges
- Maximizes window on startup
- Self-adds to Windows Defender exclusions
### 2. Blocking Features
- Downloads/modifies Windows hosts file
- Redirects Microsoft domains to localhost (127.0.0.1)
- Disables IPv6 on network adapters
- Creates Windows Firewall rules
- Blocks Microsoft IP ranges
- Downloads/processes Microsoft's public IP ranges
### 3. Main Functions
- **Fast Block**: Executes all blocking actions sequentially
- **Complete Unblock**: Reverses all blocking actions
- **Manual Actions**: Individual control of each function
### 4. Network Management
- Hosts file backup creation
- Windows Firewall rule management
- Network adapter restart capability
- DNS flush and re-registration
- Temporary file cleanup
### 5. Status Monitoring
- IPv6 status display
- Hosts file modification status
- Firewall rule status
## Interface
Interactive menu system offering:
- Complete Microsoft connection blocking
- Full unblock functionality
- Manual action execution
- Real-time status monitoring
## Pihole Adlist URL
- https://raw.githubusercontent.com/schrebra/Windows.10.DNS.Block.List/main/hosts.txt
## Warning
Blocking includes any built in apps
> Bing, Outlook, Office, Edge, Skype, Xbox, Microsoft.com, Windows Update, Defender Update, Azure, OneDrive, Spotify, TikTok, Clipchamp, Disney+ , Facebook, Linkedin and Telemetry.
## Broken Network Icon Fix
The network icon will show that you have no internet connectivity, this is because of msftconnecttest.com. Occasionally your browser will pop open and go to this domain to force a connection home. It won't work and the page will be blank. To fix this go to networkproguide.com link below to modify your registry settings.
- https://networkproguide.com/fix-connect-attempts-to-www-msftconnecttest-com-windows-server-2016/
## Optional security
I wouldn't recommend doing this but if you really want to block everything the guide is here to experiment with.
Windows Restricted Traffic Limited Functionality Baseline:
A Microsoft provided package that will allow your organization to quickly configure the settings covered in this document to restrict connections from Windows 10 and Windows 11 to Microsoft.
Download Windows Restricted Traffic Limited Functionality Baseline zip file and run the powershell script. This will break browsing the internet because of Windows checking https websites against Microsoft Certificate Authorities. To fix this use gpedit.msc and under administrative templates, find the setting for ssl or certificates.
- https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services
## IP Based Blocking
### Microsoft Public IP space
Microsoft is known to not resolve all DNS names when communicating with Windows
If you have a router firewall you can also block Windows Public Connection Endpoints
- https://www.microsoft.com/en-us/download/details.aspx?id=53602
## Powershell Firewall Blocking
Run powershell as administrator and enter "Set-ExecutionPolicy RemoteSigned"
> - **Block.MSFT.ps1** to block all Microsoft Public IP Space
> - **Unblock.MSFT.ps1** to remove the rules
## Sources
- https://answers.microsoft.com/en-us/windows/forum/windows_other-networking/need-windows-update-servers-ip-address-range-to/0b0d3618-f74c-411d-bb46-58bd605f7abe
- https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127640
- https://docs.microsoft.com/en-us/answers/questions/121284/wsus-update-url.html
- https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-troubleshooting#why-am-i-offered-an-older-updateupgrade
- https://docs.microsoft.com/en-us/windows/privacy
- https://superuser.com/questions/363120/block-access-to-windows-update
- https://www.microsoft.com/en-us/download/confirmation.aspx?id=53602
- https://www.reddit.com/r/MoneroMining/comments/8l5wpt/block_windows_update_with_firewall
- https://www.reddit.com/r/sysadmin/comments/g345cj/windows_update_official_list_of_ips_or_domains
- https://www.reddit.com/r/Windows10/comments/3j8909/does_anyone_have_an_exhaustive_list_of_ip_ranges
- https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
- https://raw.githubusercontent.com/notracking/hosts-blocklists/master/hostnames.txt
- https://gist.githubusercontent.com/amalleo25/eb73bc748029297500e76e7eac41337e/raw/9f5dd17d682b3b9c5b64c253863fcd4d74f9a7c8/telemetry-blocklist
- https://raw.githubusercontent.com/WindowsLies/BlockWindows/master/hostslist
- https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/extra.txt