Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for links to documentation or clues on how to add rules to windows firewall to deny all access to internet from computers connected via ICS and then allow only a minimal set of TCP ports.

The equivalent as it were, of adding rules to iptables FORWARD on linux. I ask because it doesn't work as one might expect, so please, answers based on experience, not speculation.

Some context:

I'm sharing a limited bandwidth 3G connection via ICS using windows7 built-in SoftAP. This is to give access to an android wifi device. However, I want to control what the android device can do.

Searching for answers about windows firewall and ICS is hampered by the amount of results concerning the firewall/ICS combined service. Also, in general, I struggle to understand the windows firewall logic from an iptables point of view. There seems to be no concept of rule order. I tried making rules that apply to the ICS service. I tried using the same and different profiles on both the SoftAP adapter and the 3G connection. In general, ICS seems to bypass most Firewall rules.

share|improve this question
What is ICS? The tag reads ".ics is the iCalendar file format, an open standard for storing calendars.". I don't think you mean that. – André Stannek May 24 '13 at 11:44
thanks. ICS - Internet Connection Sharing. – Keith May 24 '13 at 12:13

You can do this by setting "outbound" rules in Windows Firewall with Advanced Security. Under the ports section you can specify what ports you want to open -- just make sure that you put the ip address of the android device in the "remote IP" section of the rule scope.

For more clarity on how the firewall prioritizes rules (and how to override a blocking rule) see this link:

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .