How to disable Windows 10 tracking using ipset + Entware

[Asloane]

Are you sure that 195.215.247.9 is connected to Microsoft? WHOIS shows it connected to Outforceit A S in Denmark. It might be used to update the antivirus program Avira. I support privacy and blocking Win10 telemetry and am glad that you are finding solutions but would not want to block antivirus updates.

https://www.robtex.com/en/advisory/dns/195/215/247/9/

Once up and running for a while, it will return much IP addresses.

Name: Win10tracking

Type: iphash

References: 1

Header: hashsize: 1024 probes: 8 resize: 50

Members:
...

195.215.247.9

 

[Fitz Mutch]

Are you sure that 195.215.247.9 is connected to Microsoft?

Looks like you fixed the problem. Now the DNS is returning a different IP address.

nslookup redir.metaservices.microsoft.com

Name:  redir.metaservices.microsoft.com
Address 1: 88.221.14.115 a88-221-14-115.deploy.akamaitechnologies.com
Address 2: 88.221.14.138 a88-221-14-138.deploy.akamaitechnologies.com

 

[thelonelycoder]

Is anyone still using this dynamic blocking, and would it make sense to add it as an addon to AB-Solution?
Have not used or tested it for a long time, one gets used to being tracked by Microsoft after a while...

 

[steelskinz]

I use an hosts file in AB for Windows tracking.

https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/win10/spy.txt

 

[L&LD]

I use an hosts file in AB for Windows tracking.

https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/win10/spy.txt

How does this affect Windows usability though?

 

[thelonelycoder]

I use an hosts file in AB for Windows tracking.

If you add the hosts to the blacklist it only helps partially as the Redmond coders have hard coded IP addresses and dynamically assign IP's to circumvent this trick.
Hence the use of ipset-dns to overcome that.

But in other words, at least one user would appreciate integrating this then?
I know that @john9527's and another popular fork have ipset built into the latest firmware.
This would be relatively simple to achieve.

 

[john9527]

How does this affect Windows usability though?

You have to be careful. I experimented with a different set of sites from another source, and had to pare it down as it broke my hotmail and onedrive access.

 

[L&LD]

You have to be careful. I experimented with a different set of sites from another source, and had to pare it down as it broke my hotmail and onedrive access.

Thanks john9527, not worth crippling the os for it seems.

 

[thelonelycoder]

Thanks john9527, not worth crippling the os for it seems.

You have to be careful. I experimented with a different set of sites from another source, and had to pare it down as it broke my hotmail and onedrive access.

I'm running a test now with the following extended sorted list, we'll see what it breaks:

OneSettings-bn2.metron.live.com.nsatc.net
a-0001.a-msedge.net
a-0002.a-msedge.net
a-0003.a-msedge.net
a-0004.a-msedge.net
a-0005.a-msedge.net
a-0006.a-msedge.net
a-0007.a-msedge.net
a-0008.a-msedge.net
a-0009.a-msedge.net
a-0010.a-msedge.net
a-0011.a-msedge.net
a-0012.a-msedge.net
a-msedge.net
a.ads1.msn.com
a.ads2.msads.net
a.ads2.msn.com
a.rad.msn.com
a0001.a-msedge.net
a0002.a-msedge.net
a0003.a-msedge.net
a0004.a-msedge.net
a0005.a-msedge.net
a0006.a-msedge.net
a0007.a-msedge.net
a0008.a-msedge.net
a0009.a-msedge.net
a1621.g.akamai.net
a1856.g2.akamai.net
a1961.g.akamai.net
a23-218-212-69.deploy.static.akamaitechnologies.com
a248.e.akamai.net
a978.i6g1.akamai.net
ac3.msn.com
activity.windows.com
ad.doubleclick.net
adnexus.net
adnxs.com
ads.msn.com
ads1.msads.net
ads1.msn.com
aidps.atdmt.com
aka-cdn-ns.adtech.de
aka.ms
americas2.notify.windows.com.akadns.net
answers.microsoft.com
any.edge.bing.com
apps.skype.com
atlas.c10r.facebook.com
az361816.vo.msecnd.net
az512334.vo.msecnd.net
b.ads1.msn.com
b.ads2.msads.net
b.rad.msn.com
bing.com
bingads.microsoft.com
bl3301-a.1drv.com
bl3302.storage.live.com
bl3302geo.storage.dkyprod.akadns.net
bn1304-e.1drv.com
bn1306-e.1drv.com
bn1306-g.1drv.com
bn1wns2011508.wns.windows.com
bs.serving-sys.com
by3301-a.1drv.com
by3301-c.1drv.com
c-0001.c-msedge.net
c.atdmt.com
c.msn.com
c.msn.com.nsatc.net
ca.telemetry.microsoft.com
cache.datamart.windows.com
cdn.atdmt.com
cdnjs.cloudflare.com.cdn.cloudflare.net
cdp1.public-trust.com
cds26.ams9.msecn.net
ch3301-e.1drv.com
ch3302-e.1drv.com
choice.microsoft.com
choice.microsoft.com.nsatc.net
client.wns.windows.com
compatexchange.cloudapp.net
compatexchange1.trafficmanager.net
corp.sts.microsoft.com
corpext.msitadfs.glbdns2.microsoft.com
cp101-prod.do.dsp.mp.microsoft.com
cs1.wpc.v0cdn.net
cy2.displaycatalog.md.mp.microsoft.com.akadns.net
db3aqu.atdmt.com
db3wns2011111.wns.windows.com
db5.wns.windows.com
db5sch101100917.wns.windows.com
db5sch101101511.wns.windows.com
db5sch101101939.wns.windows.com
db5sch101110626.wns.windows.com
db5sch101110634.wns.windows.com
db5sch103082111.wns.windows.com
db5sch103082406.wns.windows.com
db5sch103092209.wns.windows.com
db5wns1d.wns.windows.com
db6sch102091105.wns.windows.com
dc.services.visualstudio.com
dev.virtualearth.net
df.telemetry.microsoft.com
diagnostics.support.microsoft.com
directory.services.live.com
directory.services.live.com.akadns.net
dns.msftncsi.com
download-ssl.msgamestudios.com
dt.adsafeprotected.com
e-0009.e-msedge.net
e2835.dspb.akamaiedge.net
e7341.g.akamaiedge.net
e7502.ce.akamaiedge.net
e8218.ce.akamaiedge.net
ec.atdmt.com
ecn.dev.virtualearth.net
en-us.appex-rf.msn.com
eu.vortex.data.microsoft.com
fe2.update.microsoft.com.akadns.net
fe2.ws.microsoft.com.nsatc.net
fe3.delivery.dsp.mp.microsoft.com.nsatc.net
fe3.delivery.mp.microsoft.com
feedback.microsoft-hohm.com
feedback.search.microsoft.com
feedback.windows.com
flex.msn.com
fw.adsafeprotected.com
g.msn.com
geo-prod.do.dsp.mp.microsoft.com
geover-prod.do.dsp.mp.microsoft.com
go.microsoft.com
googleads4.g.doubleclick.net
h1.msn.com
h2.msn.com
hostedocsp.globalsign.com
i1.services.social.microsoft.com
i1.services.social.microsoft.com.nsatc.net
ieonlinews.microsoft.com
inference.location.live.net
inference.location.livenet.akadns.net
ipv6.msftncsi.com
ipv6.msftncsi.com.edgesuite.net
kv101-prod.do.dsp.mp.microsoft.com
lb1.www.ms.akadns.net
li581-132.members.linode.com
licensing.md.mp.microsoft.com
live.rads.msn.com
login.live.com
login.live.com.nsatc.net
ls2web.redmond.corp.microsoft.com
m.adnxs.com
m.hotmail.com
m221.absolute.com
mobile.pipe.aria.microsoft.com
mobileads.msn.com
mpd.mxptint.net
mscrl.microsoft.com
msedge.net
msftncsi.com
msnbot-65-55-108-23.search.msn.com
msntest.serving-sys.com
nexus.officeapps.live.com
nexusrules.officeapps.live.com
ns1.msft.net
ns2.msft.net
ns3.msft.net
ns4.msft.net
ns5.msft.net
ns6.msft.net
oca.telemetry.microsoft.com
oca.telemetry.microsoft.com.nsatc.net
officeclient.microsoft.com
onesettings-bn2.metron.live.com.nsatc.net
onesettings-cy2.metron.live.com.nsatc.net
onesettings-db5.metron.live.com.nsatc.net
onesettings-hk2.metron.live.com.nsatc.net
origin.windows.microsoft.com.akadns.net
osiprod-scus-snow-000.cloudapp.net
pre.footprintpredict.com
preview.msn.com
pricelist.skype.com
prod-w.nexus.live.com.akadns.net
rad.live.com
rad.msn.com
redir.metaservices.microsoft.com
register.mesh.com
reports.wes.df.telemetry.microsoft.com
s.gateway.messenger.live.com
s0.2mdn.net
sc.iasds01.com
schemas.microsoft.akadns.net
secure.adnxs.com
secure.flashtalking.com
services.wes.df.telemetry.microsoft.com
settings-sandbox.data.microsoft.com
settings-win.data.microsoft.com
settings.data.glbdns2.microsoft.com
settings.data.microsoft.com
skyapi.live.net
skyapi.skyprod.akadns.net
skydrive.wns.windows.com
sls.update.microsoft.com.akadns.net
sm.mcafee.com
sn3301-g.1drv.com
so.2mdn.net
solitaireprod.maelstrom.xboxlive.com
spynet2.microsoft.com
spynetalt.microsoft.com
spynetus.microsoft.akadns.net
sqm.df.telemetry.microsoft.com
sqm.telemetry.microsoft.com
sqm.telemetry.microsoft.com.nsatc.net
ssw.live.com
ssw.live.com.nsatc.net
static.2mdn.net
statsfe1.ws.microsoft.com
statsfe2.update.microsoft.com.akadns.net
statsfe2.ws.microsoft.com
storecatalogrevocation.storequality.microsoft.com
storeedgefd.dsx.mp.microsoft.com
su3.mcafee.com
survey.watson.microsoft.com
t0.ssl.ak.dynamic.tiles.virtualearth.net
t0.ssl.ak.tiles.virtualearth.net
telecommand.telemetry.microsoft.com
telecommand.telemetry.microsoft.com.nsatc.net
telemetry.appex.bing.net
telemetry.appex.bing.net:443
telemetry.microsoft.com
telemetry.urs.microsoft.com
travel.tile.appex.bing.com
tsfe.trafficshaping.dsp.mp.microsoft.com
tunnel.cfw.trustedsource.org
ui.skype.com
updatekeepalive.mcafee.com
urs.microsoft.com.nsatc.net
v10.vortex-win.data.metron.life.com.nsatc.net
v10.vortex-win.data.metron.live.com.nsatc.net
v10.vortex-win.data.microsoft.com
version.hybrid.api.here.com
view.atdmt.com
vortex-bn2.metron.live.com.nsatc.net
vortex-cy2.metron.live.com.nsatc.net
vortex-db5.metron.live.com.nsatc.net
vortex-hk2.metron.live.com.nsatc.net
vortex-sandbox.data.microsoft.com
vortex-win.data.metron.live.com.nsatc.net
vortex-win.data.microsoft.com
vortex.data.glbdns2.microsoft.com
vortex.data.metron.live.com.nsatc.net
vortex.data.microsoft.com
watson.live.com
watson.microsoft.com
watson.ppe.telemetry.microsoft.com
watson.telemetry.microsoft.com
watson.telemetry.microsoft.com.nsatc.net
web.vortex.data.microsoft.com
wes.df.telemetry.microsoft.com
wildcard.appex-rf.msn.com.edgesuite.net
wildcard.twimg.com
win10.ipv6.microsoft.com
win10.ipv6.microsoft.com.nsatc.net
wns.notify.windows.com.akadns.net
wns.windows.com
www.bing.com
www.go.microsoft.akadns.net
www.msedge.net
www.msftncsi.com

 

[Badlandz]

If you add the hosts to the blacklist it only helps partially as the Redmond coders have hard coded IP addresses and dynamically assign IP's to circumvent this trick.
Hence the use of ipset-dns to overcome that.

But in other words, at least one user would appreciate integrating this then?
I know that @john9527's and another popular fork have ipset built into the latest firmware.
This would be relatively simple to achieve.

I am another user that would like to see it implemented.

 

[strumf666]

I am also interested.

 

[thelonelycoder]

I am also interested.

I am another user that would like to see it implemented.

I use an hosts file in AB for Windows tracking.

I'm abandoning the idea of adding limiting Windows tracking to AB-Solution for now.
The tests I did over the last days shows it breaks too many things on Windows computers. It introduces more problems than solving the privacy concerns.
Tweaking the list and updating it is not a primary goal I have at the moment.
I may pick up on it at another time tough.

 

[Coipu]

Why did this OP and the newer version linked in the OP stop working? I'm on 380.65 and reset my rt3200 and started again, definitely doesn't work anymore. The AB thing is great but it's unrelated to what I had achieved using original post so the suggestion to use that instead isn't helping. thanks.

 

[swetoast]

use my privacy filter does the same thing and its updated.

 

[Coipu]

Thanks for the answer, must be me, yours doesn't work either. I'll look again later when i'm fully awake.

 

[swetoast]

yeah, cause so far your the only one that said it doesnt work in anycase if you want support on it then reply in the thread for privacy-filter