MikroTik orqali Windows Update’ni bloklash

Windows operatsion tizimi avtomatik yangilanishlar uchun Microsoft serverlariga ulanadi. Agar tarmoqda bir nechta Windows qurilmalari bo’lsa, bu internet tezligiga sezilarli ta’sir qilishi mumkin. MikroTik yordamida Windows Update trafikini bloklash orqali bu muammoni hal qilish mumkin.

1. Windows Update domenlarini aniqlash

Windows Update xizmatining ishlashi uchun Microsoft-ning quyidagi serverlariga ulanadi:

windowsupdate.microsoft.com
update.microsoft.com
download.windowsupdate.com
*.windowsupdate.com
*.update.microsoft.com
*.windowsupdate.microsoft.com
*.windows.com

Biz MikroTik-da ushbu domenlarga bo’lgan trafikni cheklashimiz kerak.

2. MikroTik skript orqali Windows Update’ni bloklash

MikroTik router’imizda quyidagi skriptni ishlatamiz:

Firewall orqali bloklash

1. Terminalga kiring va quyidagi buyruqlarni kiriting:

/ip firewall address-list
add list=windows-update address=windowsupdate.microsoft.com
add list=windows-update address=update.microsoft.com
add list=windows-update address=download.windowsupdate.com
add list=windows-update address=.windowsupdate.com add list=windows-update address=.update.microsoft.com
add list=windows-update address=.windowsupdate.microsoft.com add list=windows-update address=.windows.com

/ip firewall filter
add chain=forward dst-address-list=windows-update action=drop comment="Block Windows Update"

2. Qanday ishlaydi?
   • address-list orqali Microsoft serverlari kiritiladi.
   • firewall filter qoidasi esa ushbu manzillarga yo’naltirilgan trafikni bloklaydi.

Layer7 orqali bloklash

Agar yuqoridagi usul yetarli bo’lmasa, Layer7 protokolidan foydalanish mumkin:

/ip firewall layer7-protocol
add name=windows-update regexp="windowsupdate\\.microsoft\\.com|update\\.microsoft\\.com|download\\.windowsupdate\\.com"

/ip firewall filter
add chain=forward layer7-protocol=windows-update action=drop comment="Block Windows Update via L7"

3. Bloklanganligini tekshirish

Bloklanganligini tekshirish uchun Windows qurilmasida buyruq satrini (cmd) oching va quyidagi buyruqlarni bajaring:

ping windowsupdate.microsoft.com

Xulosa

MikroTik orqali Windows Update trafikini bloklash tarmoq yuklanishini kamaytirish va internet tezligini oshirish uchun samarali usullardan biri hisoblanadi. Agar tarmoqda faqat bitta yoki ikkita qurilma bo’lsa, Windows Update’ni o’chirib qo’yish ham mumkin, ammo katta tarmoqlarda bu usul optimal hisoblanadi.

Muammo tug’ilsa yoki qo’shimcha savollaringiz bo’lsa, fikr-mulohazalaringizni qoldiring!