Windows Updates not finishing - DansG and pfBlockerNG?

[robatwork]

Since implementing a pfSense firewall with Dansguardian and pfBlockerNG, several PCs here now aren't completing their windows updates OK.

At least 3 different PCs have been stuck on "configuring windows updates" in the morning, and I strongly suspect this isn't a windows issue but something being blocked on the firewall.
The updates themselves are working, and I have all the sites I can think of whitelisted. It's just after the forced reboot that the PCs are hanging.

I have studied the sarg logs and firewall and whitelisted:
windowsupdate.microsoft.com
microsoft.com
update.microsoft.com
download.windowsupdate.com
test.stats.update.microsoft.com
ntservicepack.microsoft.com
ds.download.windowsupdate.com
ctldl.windowsupdate.com
windowsupdate.com

Also in File is:

windowsupdate.microsoft.com
update.microsoft.com
download.windowsupdate.com

In pfBlockerNG I am only now denying Inbound access on Asia and Africa, plus a few from the top 20 not including UK or USA (which isn't in that list in any case - well done US!). Can't quite believe UK is in top 5 spamming countries but that's another discussion…..in any case outbound access isn't denied on anything for now.

Any ideas on other sites to whitelist or do I need add the "Config" microsoft sites to "File" too?

thanks in advance

[deanot]

Maybe try this?

https://technet.microsoft.com/en-us/library/bb693717.aspx?f=255&MSPPError=-2147217396 or https://support.microsoft.com/en-us/kb/818018?wa=wsignin1.0