4

I'm trying to tailor my Windows Firewall settings (using the Windows Firewall with Advanced Security console) to only permit programs that need to access the Internet with an outbound connection to do so.

This works fine for normal applications as I can just allow the program, but services that load in the svchost.exe process are a problem. The only services I actually need to give access to are Windows Update and the Background Intelligent Transfer Service (and even that, I would only like Windows Update to be able to submit jobs to, but that's another issue.) Is there a method to only allow these to be permitted an outbound connection, and not any of the other services loaded in svchost?

2
  • All I can suggest it to try the "Plus" version of this software...sphinx-soft.com/Vista/order.html
    – Moab
    May 3, 2011 at 21:46
  • 1
    When you create a firewall rule, you can specify the program and services for that rule. May 3, 2011 at 22:58

1 Answer 1

1

As stated by Joe Internet in the comments, you can specify the Service you want to use. For that, you have to define a new outbound rule, but use "Custom" instead of "Program". There, you can choose the service, in your case "Windows Update", or also "wuauserv", which should be exactly what you're looking for.

1
  • 1
    Unfortunately, that does not work with Windows 8.1 anymore. Allowing "wuauserv" enables Windows Updates only up to incl. Windows 8.
    – ultimA
    Aug 15, 2014 at 14:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .