Microsoft Windows Publisher

Hi,
I have ESS with firewall in interactive mode. Every time I boot my pc there are lot of outbound traffic alerts from Generic Host Process for Win32 Services: the publisher is "Microsoft Windows Publisher" with a lot of ip addresses (most of them port 80).
I blocked all of them: but if i want my computer to do time synchronization and windows update (in automatic mode) what rules have I to set in ESS firewall or by default ESS firewall allows time synchronization and windows update, and so I can deny every other instance from svchost (I don't want to allow every instance from Generic Host Process for Win32 Services)
If I set a rule to block svchost.exe for every port and ip address (direction: out) all internet traffic stops