Windows Firewall is blocking Windows Update

Question

Here we have 2 vars in bash shell

ID="ABC"

ID_STRING="Here is the [${ID}]"

Is there any approach that we could dynamic replace the var ${ID} to "ABC" in the ID_STRING and echo to concole?

Solution 1

I've found solution.

I found it here.

Essentially I added a new incoming rule which allowed all connections coming from c:\windows\System32\svchost.exe.

I wonder why my default settings didn't already have this? Anyway it worked!

Solution 2

In Win 8 Go to Control Panel>Firewall>Advanced Settings. Then click Action>Export policy to make a copy of your current policy in case you want to restore it. Then click Action>New Rule>Custom>Next in the Program step of New Outbound Rule Wizard under the Service heading select Customize>Apply to this service>Windows Update>OK

Optional: Program: select "this program path" and select the program c:\windows\System32\svchost.exe press ok

Optional: Protocol and Ports: specify tcp port 443

Allow this connection; select your profile or leave as is (it should be explained in the wizard pretty well); give it a name; finish

Solution 3

Go to Control Panel>Firewall>Advanced Settings. Then click Action>Export policy to make a copy of your current policy in case you want to restore it. Then click Action>Restore Default Policy.

If it really is just the Firewall, this should allow you to use Windows Update.

Comments

[hicklypups]

Actually, I should have noticed the tag...My fault, just missed it.

[pants]

nah actually i added in the tag after u noted me on it

[Nordlys Jeger]

It is important to note, that firewall rules are applied from top to bottom. The first rule has the highest priority. This means if your first rule blocks all outgoing traffic to 0.0.0.0 you won't ever get a connection to the "outside", even if your next Rule explicit allows all outgoing traffic to 0.0.0.0.

[hicklypups]

The key is "what program?", or what ports? It is not listed there. It must come under the umbrella of some more esoteric listing.

[hicklypups]

He already said Windows Update works if he turns off the firewall ("it seems to update fine when I don't have the firewall on"), so no need to reset any of this.

[Nicu Zecheru]

You're right...

[pants]

I have tried to restore to default, however, the same problem still exists. Is this then not a firewall issue? I don't understand how than stopping the firewall will cause it to work.

[pants]

@KCotreau : yeah there is no like "Windows Update" program on there for me to choose.

[utapyngo]

When adding this rule on Windows 8, Windows Firewall warns me that this rule would not work as expected. Do you know what could it mean?

[Sahil]

It works like a charm, even on Windows 7

[SandRock]

Windows Update is calling a remote service. So the rule must be outbound, not inbound.

[SandRock]

Is it important to specify the svchost.exe program? I'm afraid not specifying it would allow any app to make a remote call. When I specify it, there is a strange message: "Windows Services have been restricted with rules that allow expected behavior only. [...] Rules that specify host processes might not work as expected [...]."

[Luc]

Somebody mind explaining why this was downvoted? Is it incorrect or does it not answer the question?

[SandRock]

Allowing svchost.exe will also allow traffic for all the other services on the machine. That might not be what you want.

[Admin]

I upvote because I don't know why the downvote. I never understand why someone downvote but don't tell the reason. How to learn if you don't know the reason?