#PiHole – ✅ Enable self.events.data.microsoft.com if you use Office 📄 (and you probably are!)

Buy Me A Coffee

Hi !

New house is in progress and that also means bring back PiHole running in a Raspberry Pi. If you don’t know PiHole, this may help:

Pi-hole or Pihole is a Linux network-level advertisement and Internet tracker blocking application which acts as a DNS sinkhole and optionally a DHCP server, intended for use on a private network. It is designed for low-power embedded devices with network capability, such as the Raspberry Pi, but supports any Linux machines.

PiHole

I turned this on yesterday and after a few hours of use, I got more than 40% of blocked queries in my network.

pihole blocking more that 40 percent of queries

And one of the domains was going up fast in the top 3: self.events.data.microsoft.com

pihole top 3 blocked domains

The domain is in one of the blocked url lists, however it seems to be crucial to work with office. The official documentation shares more details about this endpoint:

The following endpoints are used to connect to the Microsoft 365 admin center’s shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won’t be able to save documents to the cloud or see their recently used documents.

Source: Manage connection endpoints for Windows 10 Enterprise, version 1903.

Similar behavior affects to the 2nd and 3rd endpoint, so I decided to enable them in PiHole. I’ll keep an eye on them, and let’s see how my home network works !

Happy coding!

Greetings

El Bruno

More posts in my blog ElBruno.com.

More info in https://beacons.ai/elbruno



¿Con ganas de ponerte al día?

En Lemoncode te ofrecemos formación online impartida por profesionales que se baten el cobre en consultoría:

Advertisement

4 comments

  1. Were you seeing any issues with Windows or Office that led you to identifying the issue as the block of the self.events.data.microsoft.com or were you just investigating what the url is? I’m a remote Windows SysAdm that works a lot with O365 & Azure as well as being my wife’s tech support person (lol). I’ve seen no issues with performance with having that blocked. It’s actually my top blocked url in my house.

    Liked by 1 person

    1. Hi Dave.
      Somehow the web versions of Outlook, Word, PowerPoint, etc. didn’t work well unless I added that url to the allowed list.
      I didn’t dig much more about the issue.
      Regards

      Liked by 1 person

      1. I wonder if I’m not seeing it because we’re using various 3rd-party portals like okta to access them. I work for an MSP so we have multiple clients.

        Like

Leave a comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: