On 03/05/2016 02:09 AM, Karel Lang AFD wrote:
> Hi Todd and all,
> you wouldn't belive, how glad i would be to get rid off all windows PCs.
>
> And if it was just because of regular office users, it would be
> happening. But, alas, in my LAN is sitting roughly like 350 Dell and HP
> workstations that run 'Catia', which is a CAD application for automotive
> industry - and there is no way this will run under wine or on KVM
> virtualized windows guests (sigh)...
>
> With what jdow wrote - about the windows update server (that sits
> insided your LAN) acting like relay point, it is really hard/bad.
>
> Really, only thing i can think of is as i said in my 1st post the so
> called 'DPI' - deep packet inspection, which is a method of packet
> filtering that functions at the Application layer and inspects packet
> payloads searching for defined pattern(s).
>
> Thing is i need to know which pattern or string to search for (which i
> dunno).
> I found on internet many posts trying to block the telemetry windows
> servers, but this is really not much elegant way and also not much
> effective, as these things can change very dynamically.
>
> As i said, i'm not giving up yet and i'm gonna consult some network IP
> specialists.
>
> with br,
> Karel
>
>
>


Hi Karel,

I feel your pain.

I had a situation that might help you.  I had a customer
that had a computer run during the night shift.  The
night shift kept infesting it with porn and viruses.
But they had to get to the internet.

So, I blocked everything except the three sites that
they needed for their jobs.  Then I set Firefox to
open all three in tabs when Firefox opened.

Did the trick.  (Pissed off the night shift, but
the were all facing being fired, so ...)

Maybe you should consider blocking everything except
where they need to go.

-T


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~