On Mar 4, 2016 3:24 PM, "Karel Lang AFD" <[log in to unmask]> wrote:

Hi all,

guys, i think everyone heard already about how windows 10 badly treat its users privacy.

I'm now thinking about a way howto stop a windows 10 sending these data mining results to a microsoft telemetry servers and filter it on our SL 6 linux gateway.

I think it could be (maybe?) done via DPI (deep packet inspection). I similarly filter torrent streams on our gateway - i patched standard SL 6 kernel with 'xtables' (iptables enhancement) and it is working extremely well.

I read (not sure if true) that some DNS resolutions to M$ servers are even 'hardwired' via some .dll library, so it makes it even harder.

I'm no windows expert, but i'm and unix administrator concerned about privacy of windows desktop/laptop users sitting inside my LAN.

What i'd like to come up is some more general iptables rules, than blocking specific IP addresses or names, because, apparently they may change in any incoming windows update ...

Anyone gave this thought already? Anyone else's concerned the way i am?

cheers



--
*Karel Lang*
*Unix/Linux Administration*
[log in to unmask] | +420 731 13 40 40
AUFEER DESIGN, s.r.o. | www.aufeerdesign.cz