Is there any way to block connection to these sites with DNS or something?
https://www.bsi.bund.de/DE/Service-Navi/Publikationen/Studie... (in German, but some documents are in English).
Not at all.
Windows OS, Services and Apps: Network Connection Target Hosts (2021)
11–20 of 296 posts
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#12Typing in https://r.bing.com/ from the list gives a interesting page.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#13Is there any way to block connection to these sites with DNS or something?
Shameless plug: https://github.com/Barre/privaxy
It can be easily configured to block any host or path.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#14Typing in https://r.bing.com/ from the list gives a interesting page.
That's just one of the default messages from Azure Front Door / Azure CDN.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#15Anyone feeling tempted to play the Devil’s advocate here? :)
The numbers on their own are a meaningless metric, most of these are just CDN IPs for windows updates, and CRL IPs.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#16Is there any way to block connection to these sites with DNS or something?
You don't want to block all of that. CLR checking (else your apps may become slow to start) and windows updates (else you may become vulnerable) should be enabled.
Someone else has some suggestions?
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#17There seems to be some degree of overcounting in the reported figures: the number of “hosts” is the number of unique hostnames in the table, but the number of “IPs” is a straightforward sum of IP address counts that the table segregates by service, and I refuse to believe that (e.g.) the IP address of login.live.com as resolved by OneDrive is always different from same as resolved by Skype.
$ curl -fsSL 'https://helgeklein.com/blog/windows-os-services-apps-network-connection-target-hosts/' | pup 'td:nth-child(5)' text{} | sed 's/:.*$//' | sort -u | wc -l
291
$ curl -fsSL 'https://helgeklein.com/blog/windows-os-services-apps-network-connection-target-hosts/' | pup 'td:nth-child(4)' text{} | awk '{ s += $1 } END { print s }'
2764
Not that I’m happy about of any of these connections, but the report looks much less interesting than the totals alone suggest.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#18I wish to see this also for macOS, iOS and Android.
Aside from fsflovers link; there's a fantastic (paid) firewall software called littlesnitch.
You can use it to watch every process send network traffic, you can even collect samples of the traffic and plot it on a map: https://www.obdev.at/products/littlesnitch/index.html
(not affiliated, just a happy customer; it's one of the few things I like the mac ecosystem for.. there's attempts to port it to linux with https://github.com/evilsocket/opensnitch; but it's not as polished of course)
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#19Is there any way to block connection to these sites with DNS or something?
Install free Comodo Internet Security.
Disable DNS cache service so that all your apps resolve DNS themselves (can only be done via the registry, change the service's startup type from 2 (auto) to 4 (disabled)).
In CIS, create a new group for all files under c:/windows.
Create a rule denying all in/out requests to that group.
Create a rule allowing only DHCP and NTP requests (255.255.255.255:67 and :123) for svchost.exe (place that rule above the one for c:/windows to ensure precedence).
Use third-party utilities instead of the likes of ping.exe, e.g. hrping.
Refer to CIS documentation in case of any troubles.
Enjoy your privacy-hardened windows.
Re: Windows OS, Services and Apps: Network Connection Target Hosts (2021)
#20No post body was provided.