I am building a iptables script for a router to block all traffic from and to the machines behind, except a small set of hosts/ports (RDP incoming, DNS outgoing, ...). HTTP and HTTPS is blocked.
Internet --- Router with iptables -+- Windows XP | +- Windows XP . .
Unfortunately with HTTP/S blocked the Windows Updates are failing. I want the Updates to be working and the surfing to be blocked. These are my thoughts:
- Setting up a WSUS/Proxy -> Oversized I think, would like to spare another server
- Getting a list of all Microsoft Update Servers -> Is there any?
- Getting rid of the Asterisks of the technet dns name list somehow and allow these hosts
- Maybe a way to do the HTTP-Filtering in with Windows Firewall and separate by service (Win XP SP3)?
Any other thoughts? Maybe someone has already solved this scenario? What would you recommend?
Thanks in advance