Disable resolving fe3cr.delivery.mp.microsoft.com dns on Windows Servers via Cloudflare DNS

Question

On Windows server, how could we configure Windows Server 2019 and 2022 severs to stop using Cloudflare DNS (162.159.36.2) for resolving DNS queries for fe3cr.delivery.mp.microsoft.com, specifically for Windows Update.Currently, Windows OS servers are attempting to resolve DNS queries for the fe3cr.delivery.mp.microsoft.com domain via Cloudflare's DNS server inconsistently.

1. Is it possible to update the DNS IP to Private DNS or redirect these DNS requests to Private DNS configured at host level.
2. Also, when does the Windows update attempt to resolve query using DNS (162.159.36.2).
3. Additionally, do we know, which configuration or settings add the registry keys for DNS configuration for fe3cr.delivery.mp.microsoft.com
   HKLM\SOFTWARE\Microsoft\SIH\dns\data. Say if this reg key is deleted, which configuration or command will re-add this key.

Answer 1

I am seeing a similar issue. Everything is configured to use my internal DNS resolvers, but something seems to be coded to do lookups for fe3cr.delivery.mp.microsoft.com via 162.159.36.2. I plan to block all queries to external DNS resolvers, but I don't know if that is going to break Windows Update. It seems strange that a Microsoft component is using its own resolver instead of what the OS settings. This behavior is more what I would expect to see from malware.

Answer 2

Hello,

 

Thank you for posting in Q&A forum.

You can configure a conditional forwarder to forward DNS query for *.delivery.mp.microsoft.com to your private DNS server instead of using Cloudflare's DNS server.

After the configuration, please double verify and ensure that your DNS settings are correctly configured and that there are no conflicting rules.

 

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

 

Best regards，

Jill Zhou

 

---

If the Answer is helpful, please click "Accept Answer" and upvote it.