From feede675d20d348cce3363f4ae05de49c0040b12 Mon Sep 17 00:00:00 2001 From: hagezi Date: Wed, 19 Feb 2025 20:49:59 +0100 Subject: [PATCH] #5252 --- share/microsoft.txt | 21 ++++++++++++++++ .../allow_light-proplus.txt | 24 +++++++++++++++++++ 2 files changed, 45 insertions(+) diff --git a/share/microsoft.txt b/share/microsoft.txt index 2d0181ba3..ca7b7fc21 100755 --- a/share/microsoft.txt +++ b/share/microsoft.txt @@ -69,6 +69,27 @@ logging.diagnostics.office.com msa.diagnostics.office.com supportexperience.diagnostics.office.com +# Microsoft Defender for Endpoint (MDE) agents +# Having this blocked presents a security issue if Defender cannot act on security threats in Windows. +# https://github.com/hagezi/dns-blocklists/issues/5252 +v10c.events.data.microsoft.com +au-v10c.events.data.microsoft.com +eu-v10c.events.data.microsoft.com +jp-v10c.events.data.microsoft.com +us-v10c.events.data.microsoft.com +au-v10.events.data.microsoft.com +eu-v10.events.data.microsoft.com +jp-v10.events.data.microsoft.com +us-v10.events.data.microsoft.com +au-v20.events.data.microsoft.com +eu-v20.events.data.microsoft.com +in-v20.events.data.microsoft.com +jp-v20.events.data.microsoft.com +uk-v20.events.data.microsoft.com +us4-v20.events.data.microsoft.com +us5-v20.events.data.microsoft.com +us-v20.events.data.microsoft.com + # OPTIONAL # There are reports that the SSO (AD) login of various Microsoft apps does not work on Android - could not be reproduced and confirmed so far: https://github.com/hagezi/dns-blocklists/issues/5118 # Also used for various Microsoft telemetry: https://github.com/microsoft/cpp_client_telemetry/blob/main/docs/EUDB-compliance.md diff --git a/submit_pullrequest_here/allow_light-proplus.txt b/submit_pullrequest_here/allow_light-proplus.txt index efcf801e4..bfc0710f8 100755 --- a/submit_pullrequest_here/allow_light-proplus.txt +++ b/submit_pullrequest_here/allow_light-proplus.txt @@ -1,5 +1,29 @@ # Unblocking for relaxed, balanced and aggressive (pro++) lists only +# https://github.com/hagezi/dns-blocklists/issues/5252 +v10c.events.data.microsoft.com +*-v10c.events.data.microsoft.com +au-v10c.events.data.microsoft.com +eu-v10c.events.data.microsoft.com +jp-v10c.events.data.microsoft.com +us-v10c.events.data.microsoft.com +v10.events.data.microsoft.com +*-v10.events.data.microsoft.com +au-v10.events.data.microsoft.com +eu-v10.events.data.microsoft.com +jp-v10.events.data.microsoft.com +us-v10.events.data.microsoft.com +v20.events.data.microsoft.com +*-v20.events.data.microsoft.com +au-v20.events.data.microsoft.com +eu-v20.events.data.microsoft.com +in-v20.events.data.microsoft.com +jp-v20.events.data.microsoft.com +uk-v20.events.data.microsoft.com +us4-v20.events.data.microsoft.com +us5-v20.events.data.microsoft.com +us-v20.events.data.microsoft.com + # https://github.com/hagezi/dns-blocklists/issues/3573 heartbeats.prd.data.s.joyn.de # https://github.com/AdguardTeam/AdguardFilters/issues/183277