WSUS, NAT, Routing, Packet Filter Question

nazzeem

I have a WSUS server doing Natting and Routing for different subnets as well. My question is.

Can I filter inbound packets for only 1 specific IP in Subnet B. The reason would be that I want to limited internet access to PC1 on subnet B by filtering port 80 traffic, but it must still be able to get updates from WSUS. But I assume by blocking port 80, I will block WSUS port 8035 as well? And i wont be able to put filter only on specific IP but only on the entire subnet.