Advanced Windows Firewall Rules: block outbound connections by default.

Advanced Windows Firewall Rules: block outbound connections by default.

Tutorial:
http://www.howtogeek.com/112564/how-to-create-advanced-firewall-rules-in-the-windows-firewall/

Blocking all outbound connections by default will prevent Windows Update from working?

Is there any known issue?

I´m considering to block all outbound connections by default, and create rules to allow Chrome and FileHippo Update Checker... what do you guys think?

thanks

 

I believe windows update uses the BITS service for automagically downloading updates.I regard this service as a bit unsafe and ive disabled it without any adverses effects.I just run a windows update check manually usually on the second tuesday of every month but can be done when you wish.

The windows firewall looks an incredibly customizable firewall and offers more configurability than most but it isnt the easiest of firewalls to tame.

 

Yes, it will prevent it from working. You'll need to create a rule to allow both UDP* (DNS/53) and TCP (80, 443) for the process svchost.exe and bind it to the service Windows Update.

* If necessary.

You could use one of those Windows Firewall applications that allow you to intercept outbound connections, create the needed rules for Windows processes and your applications, then ditch those firewall applications. (If it makes your life any easier, of course.)

 

Thanks!

I'll probably opt for manual updates (allow all outbound connections only while Windows is getting and installing the updates, and after it finishes, block again outbound connections by default)