I posted my rules yesterday.

You should be able to copy the masks off them.

-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Joseph Haynes
Sent: Friday, August 13, 2004 3:33 PM
To: [log in to unmask]
Subject: Re: Windows 98/ME

Stuart,

You can try using a 16 bit mask. SO, instead of each individual host
address like 206.18.106.6 with a mask of 255.255.255.255 and
206.18.106.9 and a mask of 255.255.255.255 try something like

206.18.0.0 with a mask of 255.255.0.0.

Joe

>>> [log in to unmask] 8/13/2004 1:30:53 PM >>>
It sounds like everyone is pointing their Users to Windows Update.
Are
you comfortable with the vast number of ip address you have to allow in
order to get to Windows Updates?  I find that I have about 128,000 open
IP address so that my users can get to Windows Updates, and even with
that I still sometimes have to cancel a download and reconnect because
the Ip Address windows Updates is trying to reach is out of the range.
How are you addressing this issue?

Stuart