How to limit internet access using Win Firewall?

[jaochoo]

I am trying to setup a kiosk pc. Is there any tutorial around explaining how to configure the Windows Firewall so that it has the following profiles:

Firewall profile "normal":
- default configuration

Firewall profile "kiosk":
- software1.exe may access the internet using ports 1234 and 2345
- software2.exe may do outgoing connections only using port 3456
- software3.exe may do incoming connections only using port 4567
- all other programs may not access the internet at all; all other connections are blocked

Further, wwitching the profile (or changing the firwall configuration in general) should only be possible using admin rights.

How to do this?

 

[Golden]

Hi,

Can you see if this help:

http://www.sevenforums.com/tutorials/542-windows-firewall-add-remove-exception.html

Regards,
Golden

 

[jaochoo]

Thanks. I know how to add an exception, but that doesn't help me much. I can add rules to allow software1.exe, software2.exe, and software3.exe, but that would still...

1. Let all other "default" programs through the firewall (on a fresh Windows 7 installation, it seems that by default many programs already got access, and that new software eg. when you download a new browser will always get access by default)
2. Not give me different profiles like "normal" and "kiosk" to easily switch between
3. Not handle the ports

 

[braddersz]

Are you just after blocking specific websites?.

If so, You can do it in the Host files.

http://www.youtube.com/watch?v=x9gB1hK0h7Q

 

[ydylan77]

Well I am no self proclaimed expert on Windows firewall but I don't mind reading technical documentation.
You seem to have a fair grasp on things and maybe these references will help you get started on your solution. If not let me know and I will dig more.

Windows Firewall Tools and Settings
Managing Windows Firewall Profiles: Windows Firewall (WF)