I'm looking for links to documentation or clues on how to add rules to windows firewall to deny all access to internet from computers connected via ICS and then allow only a minimal set of TCP ports.
The equivalent as it were, of adding rules to iptables FORWARD on linux. I ask because it doesn't work as one might expect, so please, answers based on experience, not speculation.
I'm sharing a limited bandwidth 3G connection via ICS using windows7 built-in SoftAP. This is to give access to an android wifi device. However, I want to control what the android device can do.
Searching for answers about windows firewall and ICS is hampered by the amount of results concerning the firewall/ICS combined service. Also, in general, I struggle to understand the windows firewall logic from an iptables point of view. There seems to be no concept of rule order. I tried making rules that apply to the ICS service. I tried using the same and different profiles on both the SoftAP adapter and the 3G connection. In general, ICS seems to bypass most Firewall rules.