How to completely disconnect Windows-10 from the Internet, and enable it for selective files?

Question

Windows

Hello, I was already helped to find the minimum Windows-10 in the last question.
Now the main task was to disconnect the system from the Internet, and give access to it yourself.
If you're wondering why me? I will answer - this is an anonymization tool.

Answer 1

Firewall in paranoid mode with a request to allow / deny access for each connection.

Answer 2

Enable/disable network card.

Answer 3

The easiest and, in my opinion, the correct option is to install Windows Firewall Control . Next, set the filtering that you need. Judging by what you want, you should set "Strict filtering" in the profile. All incoming and outgoing connections will be blocked, and rules for the necessary programs must be created manually. I personally do not recommend doing this. Set the mode to moderate filtering, then in the "Alerts" section, set "Show alerts". Then go to rules and delete all rules. Now for each connection of programs (including system ones) a notification will be displayed, to allow or deny the connection. This is very convenient, and most importantly, until you allow it, the program will not climb into the network.
Now let's talk about the nuances. On Windows, connections go through the system process. If you block him from accessing the network, you will not have the Internet at all. So you can’t hide from the little ones themselves. You can make it a little more difficult for them to collect data through tweakers, blockers, etc. Here you have to be careful not to break anything. I recommend blocking only by hosts and by IP addresses. Stopping, disabling or removing spyware features breaks Windows 10 completely. To block, I recommend using Windows Privacy Dashboard . Do not use anything other than hosts and IP from there. Blocking rules are updated periodically, so be sure to update them. The second nuanceis that in Windows 10 the system process is updated quite often. I mean the file itself physically. He even hash amount changes. Never seen this in XP-7-8. Even if you allow it access to the network, Windows Firewall Control at least 1-2 times a day again issues a notification that the system is trying to access the network, although you have already allowed access to it. It's just that the file itself was updated and the program saw it and issued a notification. Keep this in mind. Starts to get annoying.
The third nuance is that small ones have banned telemetry blocking through the hosts file. Microsoft Defender "Protection" will mark the hosts file as malicious. Delete or send to quarantine. It will not be possible to completely get rid of telemetry in Windows 10, since it is very deep into the system itself. Disabling its components leads to system crash, errors and other delights. I would recommend changing the system if you need anonymity.