Tethered cellphone, stopping Windows updates.

[RichardL]

Hi,
I have completed an application in PB that requires internet connectivity. Normally I have a wired connection or WiFi link and they both work well. I have also tethered my Nexus 4 Android cellphone via USB and that allows me to run the application on my laptop (Windows 7) while out in the woods... and it seems very fast and reliable. So far so good. I have a problem I have not found a solution to yet and wonder if anyone can point me in the right direction or explain why I have not seen the obvious solution staring me in the face.

The laptop recognises the tether connection as a route out into the Internet world and uses it in the same way as any other connection, which includes downloading vast amounts of Windows updates and other housekeeping activities such as refreshing virus protectors. This data counts against the phone's monthly data allocation and I'm wary that I might reach my upload limit half way through a critical activity.

So, is there a simple way of preventing the laptop from not downloading updates etc until it is next connected to a higher capacity link?
I would prefer a solution that bans everything except messages to and from a specified application... but beggars can't be choosers!

Thanks,
RichardL

[IdeasVacuum]

Via Control Panel, Automatic Updates, change the setting to "Notify me but don't automatically download or install them"

[RichardL]

@IdeasVacuum
Thanks for the suggestion. I found the item on the control panel (Control Panel\All Control Panel Items\Windows Update\Change settings) but the implication is that it is for 'Windows Update' purposes so I guess Adobe, AVG and other will items still make their way through.

I am hoping for a solution that provides a 100% block by a firewall (or similar) with a controlled 'leak' to a specific application. (I'm an optimist )
RichardL

[IdeasVacuum]

Probably a firewall solution would be more convenient, but most apps that have an update function also have a setting so you can avoid an auto-download. This is really desirable - I recall a lot of people got stung by a buggy update to Mozilla Thunderbird last year. It's best to let the pot cool down for a few days before applying updates.

[TI-994A]

I am hoping for a solution that provides a 100% block by a firewall (or similar) with a controlled 'leak' to a specific application.

Hi RichardL. Simply set your mobile tethered connection to the Public Network profile, and block all connections, adding only the allowable apps to use it.

[IdeasVacuum]

I'd avoid a 100% block, because then you will not know that important updates are available - best to still receive the notifications. There is probably a smart firewall out there somewhere that can do this.
Maybe ZoneAlarm can?

[TI-994A]

I'd avoid a 100% block...

So right. And the built-in Win7 firewall allows such selectivity as well.

[RichardL]

Good afternoon gentlemen,

Thanks for the comments.

Some clarification: The laptop running my software will be in the hands of others for periods of up to 24 hours over a weekend and during that interval I must be 100% sure that there will be no problems due to any aspect of running the program... they will have enough other things to do without worrying about darn stupid computers! In this context I'm happy to disable all updates and any other remote access to the computer until it gets back home to me on Monday morning; only my software needs to access the internet while it is away.

It seems to me that the 100% firewall with a pin-hole meets my needs, but I'm a firewall newbie (despite 20+ years of using PCs) and would really appreciate some slightly more detailed guidance.

Many thanks
RichardL

[TI-994A]

...The laptop running my software will be in the hands of others for periods of up to 24 hours over a weekend and during that interval I must be 100% sure that there will be no problems due to any aspect of running the program...

Hi RichardL. Here are the steps to configure a pin-hole firewall profile:
1. Set your mobile-tethered network as the currently active connection.
2. From the control panel, select Network & Sharing Center, under the Network and Internet section.
3. You'll see View your basic network information and set up connections.
4. In the second section, under View your active networks, you should see your mobile-tethered connection.
5. There should be an icon of a house (Home network), office building (Work network), or park bench (Public network) displayed there, and the network ID next to it should be that of your mobile connection.
6. If it is not already on Public network, click on the description (either Home or Work network) and change it to Public in the dialog that pops up. Then close this network center dialog.
7. Again, from the control panel, select Windows Firewall, under the System and Security section.
8. You'll see Help protect your computer with Windows Firewall.
9. There should be two tables, one for Home or work (private) networks, and another for Public networks, which should show as Connected.
10. On the left panel, select Allow a program or feature through Windows Firewall.
11. In the dialog that opens, you should see a table with a list of programs, with two check-box columns on the right, one for private and one for public. Click the Change Settings button at the top, and in the public column, uncheck any or all of the programs or features that you wish to block, or add others as required, by clicking the Allow another program... button at the bottom.

Since the computer is going to be left with those who may not be technically inclined, I would suggest that you test it out after making these changes to make sure that it works as expected.

Hope it serves your purpose well.

[RichardL]

@TI-994A
Thank you for going to the trouble of producing such a clear set of instructions. I followed them exactly and all went well.

Already Logitech have advised that an upgrade is available for download instead of being allowed straight in.

I've logged on to my phone company with another computer and noted the aggregate down load this month, which is 13MB. I intend to leave the phone tethered to the laptop this afternoon and occasionally use my PB Logging program to request a few hundred bytes of data from the data service I use. Last time I did this about 30MB transferred in under half an hour due to a Windoze update.

I note that I can still contact Google; I guess that outgoing stuff goes through the firewall and the responses are allowed on the grounds that the data was requested, is that likely or is something not working properly?

What's it all for...?
Since I retired I have resurrected my old interest in amateur radio and one of the many lunatic things the local radio club does is participate in 'field days' where we set up a self contained radio station and communicate with like minded individuals elsewhere. Points are scored for distance so details of each contact needs to be recorded and the log submitted for adjudication.

I have used PB to write a logging program to record what happens, based on my MicroGrid tied to some SQL bits and pieces. To save time I have written some code to access an on-line database of amateur radio stations and can download the latitude and longitude of a remote station in one of two ways, then calculate the great circle distance and the compass heading, useful to get the antennas pointing the right way.

Well, it sure beats staying at home and cutting the grass

Thanks again for your kind assistance.
RichardL
(Aka G8CDD)

[IdeasVacuum]

it sure beats staying at home and cutting the grass

Just about anything beats that chore

[TI-994A]

I note that I can still contact Google; I guess that outgoing stuff goes through the firewall and the responses are allowed on the grounds that the data was requested, is that likely or is something not working properly?

Hi RichardL. So glad it works. Technically, a locked firewall should not allow anything through in any direction. However, this setup is more of an exception rather than a lock; so, while it may block the selected programs and features from passing through, it would leave certain system ports and services accessible.

However, when you said that Google was still contactable, do you mean through the browser? Or Google Drive perhaps? Because if that's the case, then those apps probably have not been blocked (unchecked from the exceptions list). While the browser may not pose too much of a data hog, Google Drive's sync function surely can.

PS: Your radio club sounds like loads of fun; if only I had the luxury of time for such pleasures.

[RichardL]

@TI-994A
Google
>However, when you said that Google was still contactable, do you mean through the browser?
Using Internet Explorer and connecting to http://www.google.co.uk/...... works normally.

In the 'Public' column I have BlueSoleilCS, BonjourService, Skype, uGridLogBook95 (my logging program) all ticked and no others.
The ticks on the first two, or Skype cannot be removed.

I have checked that the configuration shows:-
Access type : Internet
'Public Network: Local Area Connection 2

RichardL

[TI-994A]

Using Internet Explorer and connecting to http://www.google.co.uk/...... works normally.

The ticks on the first two, or Skype cannot be removed.

Hello again RichardL. I checked, and apparently Windows Internet Explorer is not considered a program, but an integral system feature. So, it's not possible to selectively exclude it from firewall access. But all the others in the list should be. Some may not be totally excluded, and would require at least one profile to remain active. Skype for example, could be unchecked in the public column if the private column is left on; and vice versa.

[RichardL]

Good morning gentlemen,

I left the laptop and phone tethered most of yesterday and overnight. During that time I interrogated the amateur radio call sign database a few times and carried out a few Google searches but avoided any significant image transfers.

This morning I logged on to my phone supplier and the total of the last 24 hours activities amounted to just 5Mb. I realise that from the statistical point of view this is at best just an indicative figure and that yesterday might just have been 'no download Tuesday'. I will leave the test running, keep an eye on the usage figures and report back in a day or so.... but it looks goodish** so far.

RichardL

Note: ** 'Goodish' my mum's instruction to departing grandchildren was 'Be goodish.... but if you are too good your mum and dad will wonder what you are really up to!'