How to limit internet access using Win Firewall?

I am trying to setup a kiosk pc. Is there any tutorial around explaining how to configure the Windows Firewall so that it has the following profiles:

Firewall profile "normal":
- default configuration

Firewall profile "kiosk":
- software1.exe may access the internet using ports 1234 and 2345
- software2.exe may do outgoing connections only using port 3456
- software3.exe may do incoming connections only using port 4567
- all other programs may not access the internet at all; all other connections are blocked

Further, wwitching the profile (or changing the firwall configuration in general) should only be possible using admin rights.

How to do this?

Thanks. I know how to add an exception, but that doesn't help me much. I can add rules to allow software1.exe, software2.exe, and software3.exe, but that would still...

1. Let all other "default" programs through the firewall (on a fresh Windows 7 installation, it seems that by default many programs already got access, and that new software eg. when you download a new browser will always get access by default)
2. Not give me different profiles like "normal" and "kiosk" to easily switch between
3. Not handle the ports

Are you just after blocking specific websites?.

If so, You can do it in the Host files.

http://www.youtube.com/watch?v=x9gB1hK0h7Q