iptables rules for external firewalls / routers
I'm leaving this here, in case you want to include it in your package.
this IP list was compiled on 02-09-2015, so some new entries might be missing
!/bin/sh
block MS spying
IP list taken from:
http://www.hakspek.com/security/windows-script-to-remove-all-windows-10-telemetry-updates/
http://cyberwarzone.com/block-these-ips-to-stop-microsoft-from-snooping-on-your-windows-10-device/
https://github.com/WindowsLies/BlockWindows/
https://github.com/10se1ucgo/DisableWinTracking/
iptables -A INPUT -p all -s 111.221.29.177 -j DROP iptables -A INPUT -p all -s 128.177.96.24 -j DROP iptables -A INPUT -p all -s 128.177.96.56 -j DROP iptables -A INPUT -p all -s 128.177.96.59 -j DROP iptables -A INPUT -p all -s 128.177.96.65 -j DROP iptables -A INPUT -p all -s 131.253.14.76 -j DROP iptables -A INPUT -p all -s 131.253.40.47 -j DROP iptables -A INPUT -p all -s 131.253.40.50 -j DROP iptables -A INPUT -p all -s 131.253.40.59 -j DROP iptables -A INPUT -p all -s 134.170.115.60 -j DROP iptables -A INPUT -p all -s 134.170.115.62 -j DROP iptables -A INPUT -p all -s 134.170.185.70 -j DROP iptables -A INPUT -p all -s 134.170.30.202 -j DROP iptables -A INPUT -p all -s 134.170.53.29 -j DROP iptables -A INPUT -p all -s 134.170.58.190 -j DROP iptables -A INPUT -p all -s 137.116.81.24 -j DROP iptables -A INPUT -p all -s 137.117.100.176 -j DROP iptables -A INPUT -p all -s 157.55.129.21 -j DROP iptables -A INPUT -p all -s 157.55.240.220 -j DROP iptables -A INPUT -p all -s 157.56.106.189 -j DROP iptables -A INPUT -p all -s 157.56.121.89 -j DROP iptables -A INPUT -p all -s 157.56.149.250 -j DROP iptables -A INPUT -p all -s 157.56.23.91 -j DROP iptables -A INPUT -p all -s 157.56.57.5 -j DROP iptables -A INPUT -p all -s 157.56.91.77 -j DROP iptables -A INPUT -p all -s 157.56.96.54 -j DROP iptables -A INPUT -p all -s 165.254.155.51 -j DROP iptables -A INPUT -p all -s 165.254.155.88 -j DROP iptables -A INPUT -p all -s 168.62.187.13 -j DROP iptables -A INPUT -p all -s 172.226.138.66 -j DROP iptables -A INPUT -p all -s 191.232.80.60 -j DROP iptables -A INPUT -p all -s 191.234.72.183 -j DROP iptables -A INPUT -p all -s 191.234.72.186 -j DROP iptables -A INPUT -p all -s 191.234.72.188 -j DROP iptables -A INPUT -p all -s 191.234.72.190 -j DROP iptables -A INPUT -p all -s 198.78.194.252 -j DROP iptables -A INPUT -p all -s 2.22.61.43 -j DROP iptables -A INPUT -p all -s 2.22.61.66 -j DROP iptables -A INPUT -p all -s 204.0.5.16 -j DROP iptables -A INPUT -p all -s 204.79.197.200 -j DROP iptables -A INPUT -p all -s 207.123.38.253 -j DROP iptables -A INPUT -p all -s 207.46.223.94 -j DROP iptables -A INPUT -p all -s 207.68.166.254 -j DROP iptables -A INPUT -p all -s 23.197.139.57 -j DROP iptables -A INPUT -p all -s 23.201.43.90 -j DROP iptables -A INPUT -p all -s 23.201.58.73 -j DROP iptables -A INPUT -p all -s 23.218.212.69 -j DROP iptables -A INPUT -p all -s 23.99.10.11 -j DROP iptables -A INPUT -p all -s 63.241.108.124 -j DROP iptables -A INPUT -p all -s 64.4.54.22 -j DROP iptables -A INPUT -p all -s 64.4.54.254 -j DROP iptables -A INPUT -p all -s 64.4.54.32 -j DROP iptables -A INPUT -p all -s 64.4.6.100 -j DROP iptables -A INPUT -p all -s 65.39.117.230 -j DROP iptables -A INPUT -p all -s 65.52.100.11 -j DROP iptables -A INPUT -p all -s 65.52.100.7 -j DROP iptables -A INPUT -p all -s 65.52.100.9 -j DROP iptables -A INPUT -p all -s 65.52.100.91 -j DROP iptables -A INPUT -p all -s 65.52.100.92 -j DROP iptables -A INPUT -p all -s 65.52.100.93 -j DROP iptables -A INPUT -p all -s 65.52.100.94 -j DROP iptables -A INPUT -p all -s 65.52.108.153 -j DROP iptables -A INPUT -p all -s 65.52.108.33 -j DROP iptables -A INPUT -p all -s 65.55.108.23 -j DROP iptables -A INPUT -p all -s 65.55.2.6 -j DROP iptables -A INPUT -p all -s 65.55.252.43 -j DROP iptables -A INPUT -p all -s 65.55.252.63 -j DROP iptables -A INPUT -p all -s 65.55.252.71 -j DROP iptables -A INPUT -p all -s 65.55.252.92 -j DROP iptables -A INPUT -p all -s 65.55.252.93 -j DROP iptables -A INPUT -p all -s 65.55.29.238 -j DROP iptables -A INPUT -p all -s 65.55.39.10 -j DROP iptables -A INPUT -p all -s 65.55.83.120 -j DROP iptables -A INPUT -p all -s 66.119.144.157 -j DROP iptables -A INPUT -p all -s 8.254.23.254 -j DROP iptables -A INPUT -p all -s 8.27.81.126 -j DROP iptables -A INPUT -p all -s 8.27.81.254 -j DROP iptables -A INPUT -p all -s 93.184.215.200 -j DROP iptables -A OUTPUT -p all -d 111.221.29.177 -j DROP iptables -A OUTPUT -p all -d 128.177.96.24 -j DROP iptables -A OUTPUT -p all -d 128.177.96.56 -j DROP iptables -A OUTPUT -p all -d 128.177.96.59 -j DROP iptables -A OUTPUT -p all -d 128.177.96.65 -j DROP iptables -A OUTPUT -p all -d 131.253.14.76 -j DROP iptables -A OUTPUT -p all -d 131.253.40.47 -j DROP iptables -A OUTPUT -p all -d 131.253.40.50 -j DROP iptables -A OUTPUT -p all -d 131.253.40.59 -j DROP iptables -A OUTPUT -p all -d 134.170.115.60 -j DROP iptables -A OUTPUT -p all -d 134.170.115.62 -j DROP iptables -A OUTPUT -p all -d 134.170.185.70 -j DROP iptables -A OUTPUT -p all -d 134.170.30.202 -j DROP iptables -A OUTPUT -p all -d 134.170.53.29 -j DROP iptables -A OUTPUT -p all -d 134.170.58.190 -j DROP iptables -A OUTPUT -p all -d 137.116.81.24 -j DROP iptables -A OUTPUT -p all -d 137.117.100.176 -j DROP iptables -A OUTPUT -p all -d 157.55.129.21 -j DROP iptables -A OUTPUT -p all -d 157.55.240.220 -j DROP iptables -A OUTPUT -p all -d 157.56.106.189 -j DROP iptables -A OUTPUT -p all -d 157.56.121.89 -j DROP iptables -A OUTPUT -p all -d 157.56.149.250 -j DROP iptables -A OUTPUT -p all -d 157.56.23.91 -j DROP iptables -A OUTPUT -p all -d 157.56.57.5 -j DROP iptables -A OUTPUT -p all -d 157.56.91.77 -j DROP iptables -A OUTPUT -p all -d 157.56.96.54 -j DROP iptables -A OUTPUT -p all -d 165.254.155.51 -j DROP iptables -A OUTPUT -p all -d 165.254.155.88 -j DROP iptables -A OUTPUT -p all -d 168.62.187.13 -j DROP iptables -A OUTPUT -p all -d 172.226.138.66 -j DROP iptables -A OUTPUT -p all -d 191.232.80.60 -j DROP iptables -A OUTPUT -p all -d 191.234.72.183 -j DROP iptables -A OUTPUT -p all -d 191.234.72.186 -j DROP iptables -A OUTPUT -p all -d 191.234.72.188 -j DROP iptables -A OUTPUT -p all -d 191.234.72.190 -j DROP iptables -A OUTPUT -p all -d 198.78.194.252 -j DROP iptables -A OUTPUT -p all -d 2.22.61.43 -j DROP iptables -A OUTPUT -p all -d 2.22.61.66 -j DROP iptables -A OUTPUT -p all -d 204.0.5.16 -j DROP iptables -A OUTPUT -p all -d 204.79.197.200 -j DROP iptables -A OUTPUT -p all -d 207.123.38.253 -j DROP iptables -A OUTPUT -p all -d 207.46.223.94 -j DROP iptables -A OUTPUT -p all -d 207.68.166.254 -j DROP iptables -A OUTPUT -p all -d 23.197.139.57 -j DROP iptables -A OUTPUT -p all -d 23.201.43.90 -j DROP iptables -A OUTPUT -p all -d 23.201.58.73 -j DROP iptables -A OUTPUT -p all -d 23.218.212.69 -j DROP iptables -A OUTPUT -p all -d 23.99.10.11 -j DROP iptables -A OUTPUT -p all -d 63.241.108.124 -j DROP iptables -A OUTPUT -p all -d 64.4.54.22 -j DROP iptables -A OUTPUT -p all -d 64.4.54.254 -j DROP iptables -A OUTPUT -p all -d 64.4.54.32 -j DROP iptables -A OUTPUT -p all -d 64.4.6.100 -j DROP iptables -A OUTPUT -p all -d 65.39.117.230 -j DROP iptables -A OUTPUT -p all -d 65.52.100.11 -j DROP iptables -A OUTPUT -p all -d 65.52.100.7 -j DROP iptables -A OUTPUT -p all -d 65.52.100.9 -j DROP iptables -A OUTPUT -p all -d 65.52.100.91 -j DROP iptables -A OUTPUT -p all -d 65.52.100.92 -j DROP iptables -A OUTPUT -p all -d 65.52.100.93 -j DROP iptables -A OUTPUT -p all -d 65.52.100.94 -j DROP iptables -A OUTPUT -p all -d 65.52.108.153 -j DROP iptables -A OUTPUT -p all -d 65.52.108.33 -j DROP iptables -A OUTPUT -p all -d 65.55.108.23 -j DROP iptables -A OUTPUT -p all -d 65.55.2.6 -j DROP iptables -A OUTPUT -p all -d 65.55.252.43 -j DROP iptables -A OUTPUT -p all -d 65.55.252.63 -j DROP iptables -A OUTPUT -p all -d 65.55.252.71 -j DROP iptables -A OUTPUT -p all -d 65.55.252.92 -j DROP iptables -A OUTPUT -p all -d 65.55.252.93 -j DROP iptables -A OUTPUT -p all -d 65.55.29.238 -j DROP iptables -A OUTPUT -p all -d 65.55.39.10 -j DROP iptables -A OUTPUT -p all -d 65.55.83.120 -j DROP iptables -A OUTPUT -p all -d 66.119.144.157 -j DROP iptables -A OUTPUT -p all -d 8.254.23.254 -j DROP iptables -A OUTPUT -p all -d 8.27.81.126 -j DROP iptables -A OUTPUT -p all -d 8.27.81.254 -j DROP iptables -A OUTPUT -p all -d 93.184.215.200 -j DROP