Windows update .... again!

Mmmm ok this is really a security issue ... but I think it belongs in this forum as its specifically to do with xp update ...

So, here is the deal, xp corporate, running kerio PF, user ocassionally updating at windows update ... eventually comes back & asks how many updates he should have ....

So I realise somethings not working, & lo the firewall is blocking it ... so I think write some rules ...

That's when I got stuck :rolleyes: ...arrrrrrrrgh!.... :D

Can someone provide me with the appropriate rules ?

first I write some rules and it lets me get SP 1 express... alls good, then I revisit & it says there are no updates or additional features even though I just saw a load ....

I know many of the security fixes are bundled in sp1 but the additional features ought still to be there ?

The only way I can get this user able to use windows update is to turn off his firewall, which isn't very good! Help :D