Windows Update downloads 9 gig

[rustic]

Hi guys/gals,

Just got the shock of my life, vodacom put my account into softlock (thank the heavens) because one of my pc's on the network sucked down 9 odd gig trying to get the windows xp sp3 update.Most exspensive update i've seen.

I'm currently running IPCOP and i checked the logs and confirmed that it was a window update on one specific pc. I've turned it off at the pc but i want a way to ensure that this never happens again. i.e user decides to turn it back on. We don't run any servers so policies/WSUS is not an option.

Is it as simple as blocking the windows update website at the firewall?

any help would be greatly appreciated :)

[Raithlin]

9 GB? How the heck did that happen?! There's no way the update is that big!

Chances are the software kept losing connection, and perhaps had to restart the whole time? Also interesting, seeing as it uses the usual resume feature...

You could always get the network download and install it - then it wouldn't need to run that particular update again.

"Windows + Break" brings up your system dialog. Go to "Automatic Updates" and select "Turn off Automatic Updates". Press OK.
Wait, you've done that. :confused: Then I don't know what else you CAN do.

[The_Librarian]

Is it as simple as blocking the windows update website at the firewall?


Yes, it's simple as that. Done that on my Smoothwall with Dansguardian :D

Note that windows might try to contact another windowsupdate site if the one fails, so be prepared to block a whole lot of these... :D

[teraside]

With automatic updates turned off, I don't see why it should start downloading again. It's faster and more convenient than blocking WU at firewall level.

[cbrunsdonza]

port 443 is used by Windows update - block it in IpCop (still the best firewall).

[The_Librarian]

port 443 is used by Windows update - block it in IpCop (still the best firewall).

And then you won't be able to do Internet banking or access https sites... :rolleyes:

[.Froot.]

9GB for XPSP3? I've heard about this one. Also on Vodacom Internet. What happens is it loses connection (as per previous happenings with this) and it retries downloading it. Phone Vodacom and they might give you a little discount. This happened to the other guy who downloaded 12GB instead of 450MB SP3.

[PsyWulf]

block update.microsoft.com? :D

[Raithlin]

9GB for XPSP3? I've heard about this one. Also on Vodacom Internet. What happens is it loses connection (as per previous happenings with this) and it retries downloading it. Phone Vodacom and they might give you a little discount. This happened to the other guy who downloaded 12GB instead of 450MB SP3.
Funny how it only happens on Vodacom Internet...

[cbrunsdonza]

And then you won't be able to do Internet banking or access https sites... :rolleyes:

Thanx for that ... duh on my side :D ... thought the port looked familiar...

[Garyvdh]

AutoPatcher FTW! :D

http://www.autopatcher.com/

[gregmcc]

Sounds like something fishy with Vodacom. Nothing wrong with MS's updates.

[The_Librarian]

Thanx for that ... duh on my side :D ... thought the port looked familiar...

:D ;) :D

[LandyMan]

I can believe it happens ... I tried to download a Windows Mobile ROM over the weekend (100Mb) ... cost me around 280Mb in total, as it downloads to a certain point, rejects and tries to download again ... eventually I disconnected and gave up, this morning it downloaded fine on IS ADSL

[stoke]

I had 3 computers here trying to download that horrendus update, which would have cost me just less than 1.5GB.

But, for IPCop, there's a pulgin that will bugger the Windoze Updates and then redistribute them as requested ... i.e. Only download them once.

I did use that, but have since stopped using IPCop.

[The_Librarian]

I had 3 computers here trying to download that horrendus update, which would have cost me just less than 1.5GB.

But, for IPCop, there's a pulgin that will bugger the Windoze Updates and then redistribute them as requested ... i.e. Only download them once.

I did use that, but have since stopped using IPCop.

what's a pulgin? :confused: :p

But, yes, it's a good idea to set up a caching server which will cache most needed downloads - so you'll download something once, but it will be distributed across the rest of your network. Saves on download time and cap (and money).

[.Froot.]

IPCop is just a friggin dream come true.

[HavocXphere]

9gig. Damn. That must have been one hell of an unstable connection.


what's a pulgin? :confused: :p
Malicious spirit that resents firewalls & likes cold coffee.

[The_Librarian]

IPCop is just a friggin dream come true.

Best of all - it's free :D

M$'s ISA server is not... and it requires some serious hardware...

[.Froot.]

Best of all - it's free :D

M$'s ISA server is not... and it requires some serious hardware...

Who cares about M$'s servers? IPCop can run on a P2.... ISA need like what, Xeon Dual Core?... and a lot of money....:mad:

[rustic]

Thanks for the reply's :)

It tried to download sp3 (who knows how many times, i stopped counting as its pages and pages in the proxy logs). I phoned vodacom and asked them about the bill which is sitting at seven odd thousand, but they say there is nothing they can do.

Anyway thats my fight, thanks again for the advice, i've blocked update.microsoft.com

ciao

[The_Librarian]

Thanks for the reply's :)

It tried to download sp3 (who knows how many times, i stopped counting as its pages and pages in the proxy logs). I phoned vodacom and asked them about the bill which is sitting at seven odd thousand, but they say there is nothing they can do.

Anyway thats my fight, thanks again for the advice, i've blocked update.microsoft.com

ciao

Keep an eye on your logs to make sure it doesn't download from another source ;)

[PeterCH]

Oh and don't forget to thank Microsoft! :)

[dablakmark8]

Yes, it's simple as that. Done that on my Smoothwall with Dansguardian :D

Note that windows might try to contact another windowsupdate site if the one fails, so be prepared to block a whole lot of these... :D
I never new that:rolleyes:

[quovadis]

If you've got multiple PCs on your network you might consider running WSUS from Microsoft - It acts as a repository for windows update and you can select which updates you want to download and all the PCs on your network will update via this central repository instead of connecting individually to Windows Update.

[DjStyles]

If you've got multiple PCs on your network you might consider running WSUS from Microsoft - It acts as a repository for windows update and you can select which updates you want to download and all the PCs on your network will update via this central repository instead of connecting individually to Windows Update.

Dont you need Server 2003 or later to run WSUS?

[Ryder_JHB]

Have I ever mentioned that we have a WSUS (http://technet.microsoft.com/en-us/wsus/default.aspx) Server on Jawug? ;)