DNSwitch is able to block updates by default if you want to use that
Otherwise block the update servers in your router themselves. I doubt anyone will setup an actual DNS server for this again since its almost always abused once it goes out to the public