Forward closed ports to a second Windows connection?

Question

Windows

The situation is this:
There is Internet in a foreign hostel (wifi \ lan), all ports are closed except 21 80 443 8000
SSL \ TLS encryption is prohibited (for study).
There is a phone with 16 gigabytes of Internet, and the ability to connect to a PC via WiFi \ USB
There is a laptop, on Windows, to which you can give Internet via Lan \ USB \ WiFi
In fact - two network connections that work in parallel.
Question 1: I would like to allow using for surfing - the normal Internet from the hostel, and for everything else (sftp \ ssl) - according to the principle of white-black lists telephone, How best to do this? With what tools on Windows?
Question 2: Is it possible to force programs to only look at a certain interface? (FileZilla- by sftp)?
I would be very grateful for a solution.

Answer 1

Question 1: I would like to allow using for surfing - normal Internet from the hostel, and for everything else (sftp \ ssl) - according to the principle of white-black lists telephone, How best to do this? With what tools on Windows?

You can use a proxy - all traffic will go to the default gateway, and the one you need to specify the use of a proxy. Write a route to the proxy server address so that traffic to it does not go through the default gateway.

Question 2: Is it possible to force programs to only look at a certain interface? (FileZilla- by sftp)?

You cannot specify an interface for applications.
If the addresses of the servers to which you need to go via sftp are known, you can again simply specify the route with an explicit indication of the interface.

Answer 2

1. put a router, connect two Internets to it - wired (Internet from the hostel) and wireless (raise an access point on the phone, and connect to it from the router). and then steer the router - depending on the destination port, choose the Internet. either Mikrotik or something based on openwrt (and its clones) is suitable as a router. as a result, on the router you can get the "final" both wired and wireless Internet.
2. raise somewhere in the "free network" ovpn on port 443. if there is no traffic analysis, it can work;)