• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1374
  • Last Modified:

Safe Microsoft address

I've been trying to lock down my home computer and would like to start by only allowing Microsoft update internet addresses.  It seems 207.46.0.0 255.255.0.0 and 65.52.0.0 to 65.55.255.255 are registered to Microsoft as seen by a "whois" but other addresses are not so obvious.  Is there a location that lists all the addresses that Microsoft might what to use to "call home"?
0
alante
Asked:
alante
1 Solution
 
Rich RumbleSecurity SamuraiCommented:
Their DNS or someone with a lot of time mapping the M$ address space.
 host update.microsoft.com (if not on *nix use: http://www.checkwhois.org/ )
update.microsoft.com is an alias for update.microsoft.com.nsatc.net.
update.microsoft.com.nsatc.net has address 64.4.23.190
update.microsoft.com.nsatc.net has address 65.55.192.29
update.microsoft.com.nsatc.net has address 207.46.209.124

BIG sites like M$, Google, Yahoo, Amazon etc... use round-robin DNS so that one IP doesn't get all the traffic, and further, those IP's are also load balanced with load-balancer appliances like the Cisco CSS, F5, BigIP etc... so there can actually be hundreds and thousands of servers that answer to those public ip's. Try pinging google.com every few minutes, you'll likely get a different IP most of the time.
-rich
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now