Windows Update problem

[duttyend]

Dear @henrypp ,

The new version (2.3.1.) introduced a regression regarding Windows Update (was working fine with 2.3, 2.2.12 and below).

Using Windows Update Mini Tool, I get those error messages :
[13:14:15]: Start Windows Update Service
[13:14:15]: Windows Update Service enabled
[13:14:17]: Searching for updates
[13:14:17]: An error has occurred: 0x80072EFD

My simplewall configuration is as follows (and was the same with 2.3) :
Settings > Rules > System rules > Windows Update enabled
On the main simplewall screen, I see that you added wuauserv to the list, I checked the box to include it in Allowed apps but I still get the same error.

Thanks a lot for your time !

[henrypp]

2.3.1 fixed?

[duttyend]

No, unfortunately. And version 2.3.2 neither fixed it.
I see that you have removed "Windows Update" from System rules so I added Windows Update service to my whitelist but it still doesn't work.

[hesss5]

try allow BITS service see work or not

[hesss5]

or according to here
http://www.tomshardware.com/faq/id-3128557/fix-windows-error-0x80072efd.html
allow service which start with winhttp

[duttyend]

Thanks @hesss5 , I tried adding BITS service and the only WinHTTP service there is on my Windows 10 1709, but still the same error...

Happened to me all the time but eventually it stopped. I managed to fix it by running wu170509.diagcab, not sure the tool name but it looks like this https://support.microsoft.com/help/2714434/description-of-the-windows-update-troubleshooter

Had to run that tool for every single update, for weeks. Windows 10 is just pure shit.

[beerisgood]

@whytho2000 then i wonder why win10 runs here on three systems without problems. And no its not shit. If you dont like it, dont use it?!

[duttyend]

Thanks @whytho2000 , I have tried the troubleshooters and resetting all components, it doesn't fix the problem.
I really think the root is within the newest changes made from version 2.2.12 because when I disable filtering , Windows Update works fine, as it did with previous simplewall versions.

@beerisgood pottery https://github.com/beerisgood/Windows10_Anti-Telemetry

What, do you think I'm some redditor who chooses /r/linux or /r/windows10 like it's some kind of exclusive club? I think osx and linux are mostly shit, and I use them too, but I'm forced to use Windows 10 because things I need only runs there. It's just sad how much wasted potential W10 has when it could be the best OS out there if MS haven't decided to monetize the shit out of it instead of making a good OS

@duttyend you need to disable the extra_ and spy_ filters too for it to work (when updating), I'm not sure which ones so I just disable them all, and several exe's that I can't remember exactly right now (but you'll get the notification)

[MVoz]

@henrypp 2.3.2 fixed!

@whytho2000 https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee424379(v=ws.10)

Windows 10 Ent - ok

"C:\Windows\System32\msdt.exe" -ID WindowsUpdateDiagnostic

[duttyend]

@whytho2000 I disabled every spy_filter but it didn't solve the problem unfortunately... what makes me think it is due to a new change is because until version 2.3, everything was working fine

[kevin2xk]

I just installed 2.3.2 today (new user) and Windows Updates worked properly after installing simplewall. Seems like something on your end.

[beerisgood]

I dont have problems after update to latest Version

[henrypp]

It's not a bug, it's feature.

Old version of "Windows Update" system rule will allows ALL http/https traffic through svchosts.exe, it is not safe, because service hosts have most of features (like BITS or another shit) for passthrough network restriction, send telemetry etc...

New version of "Windows Update" system rule allows only wuauserv, but there have one mistake: on different OS it worked different, on Win7 it working when you allows wuauserv, on Win8+ it worked partially, most of traffic going though wuauserv rule, and then blocked downloading for service host svchosts.exe and i testing what another rule needs to add for Win8+ to allows WU entirely.

People who do not have problems with WU, maybe you are allows svchosts.exe entirely?

[hesss5]

will i disabled windows update.
i use WHDownloader to get update :)