What sites do I have to allow through Bordermanager Access rules to let
only Windows Update to work for Windows XP SP2 computers?

I tried a lot of windowsupdate.microsoft.com related sites in the
specified URL list. But it is not working completely. Only full access
solves the problem but that is not what I want.

Is there a standard procedure, how to define the specified URL list to get
Windows Update to work for Windows XP SP2 computers?

Frank