When I'm on public WiFi (laptop), I want to configure my firewall through its advanced settings to allow only HTTPS web traffic.
My first attempt was to block incoming and outgoing by default, then allow both UDP and TCP port 443 from any computer to any computer (both in and out). However I experience a net error when using my browsers on any SSL/443 website. What am I misunderstanding that is causing my attempt to fail?
The browser error reported in Chrome is
Error 10 (net::ERR_ACCESS_DENIED): Unknown error.
Firefox gives a general error, but when I trace the HTTPS traffic using Fiddler I get this:
CONNECT mail.google.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:18.104.22.168) Gecko/20101026 Firefox/3.6.12 GTB7.1 ( .NET CLR 3.5.30729; .NET4.0E)
HTTP/1.1 502 Connection failed Connection: close Timestamp: 21:57:34.739
HTTPS connection failed.
System.Net.Sockets.SocketException: An attempt was made to access a socket in a way forbidden by its access permissions xxx.xxx.xx.xx:443
at Fiddler.ServerChatter.CreateConnectedSocket(IPAddress arrDestIPs, Int32 iPort, Session _oSession)
When the policy is set up right I plan to export it (save it) for the future when I'm back on public WiFi.
Note: If a different version of Windows has similar config nuances, feel free to post those answers too - if it's close I can probably extrapolate.