Rules for svchost.exe

I cannot block strange UDP traffic belongs to svchost.exe. Does anybody help me?
Rules must allow:
UDP traffic within my local net - -
UDP traffic to domain server -
TCP traffic to anywhere.
Rules must dissallow:
UDP traffic to external web, except



Just to confirm; You want these rules applied to svchost only? and not your entire computer correct?