Can I use wildcards in dnsmasq?

[Claghorn]

I'd like to be able to prevent all windows updates inside my local network, and since everyone is pointing at my merlin based router, that seems like a great place to block lookups of all the names mentioned in https://technet.microsoft.com/en-us/library/bb693717.aspx, but they use wildcards for the names, so I'd need to block using some sort of wildcard mechanism as well. Is this possible with the dnsmasq on merlin?

 

[thelonelycoder]

No, this is not possible in Dnsmasq.

 

[ColinTaylor]

No, this is not possible in Dnsmasq.

Well not through the GUI. It might be possible with a custom script/config:

http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

See the --address and --server options (I can't paste the text here because cloudflare block me).

 

[thelonelycoder]

Well not through the GUI. It might be possible with a custom script/config:

http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

See the --address and --server options (I can't paste the text here because cloudflare block me).

You got me. Using it on all routers of course...
Create /jffs/configs/dnsmasq.conf.add and add whatever you need, one per line, works both for http and https:

address=/windowsupdate.microsoft.com/0.0.0.0
address=/update.microsoft.com/0.0.0.0

Make sure the file has UNIX line ending.
Then restart dnsmasq:

service restart_dnsmasq

Then ping it, it should resolve to 0.0.0.0 or whatever IP you set it.

 

[sfx2000]

I'd like to be able to prevent all windows updates inside my local network

Just keep in mind - security updates

WannaCry was fixed, and a push rolled out - most folks that got bit by that one, they were blocking WindowsUpdate on those machines.

 

[Claghorn]

Just keep in mind - security updates

WannaCry was fixed, and a push rolled out - most folks that got bit by that one, they were blocking WindowsUpdate on those machines.

I don't want to prevent updates forever, I just want to make sure they only happen when I'm ready for them. The last time I was doing my taxes, I went out to lunch and came back to spinning circles telling me not to touch the machine. Aaugh!

I think I remember reading about being able to attach scripts to custom buttons in the GUI, so if I get this to work, perhaps I can add a couple of buttons for enable/disable windows updates .

 

[ColinTaylor]

I think I remember reading about being able to attach scripts to custom buttons in the GUI,

Yes I read that as well, it can't be done.