Hi all,

guys, i think everyone heard already about how windows 10 badly treat 
its users privacy.

I'm now thinking about a way howto stop a windows 10 sending these data 
mining results to a microsoft telemetry servers and filter it on our SL 
6 linux gateway.

I think it could be (maybe?) done via DPI (deep packet inspection). I 
similarly filter torrent streams on our gateway - i patched standard SL 
6 kernel with 'xtables' (iptables enhancement) and it is working 
extremely well.

I read (not sure if true) that some DNS resolutions to M$ servers are 
even 'hardwired' via some .dll library, so it makes it even harder.

I'm no windows expert, but i'm and unix administrator concerned about 
privacy of windows desktop/laptop users sitting inside my LAN.

What i'd like to come up is some more general iptables rules, than 
blocking specific IP addresses or names, because, apparently they may 
change in any incoming windows update ...

Anyone gave this thought already? Anyone else's concerned the way i am?

cheers



-- 
*Karel Lang*
*Unix/Linux Administration*
[log in to unmask] | +420 731 13 40 40
AUFEER DESIGN, s.r.o. | www.aufeerdesign.cz