admin管理员组

文章数量:1530518

2024年7月14日发(作者:)

在win7下用命令行关闭445等端口只开放特定IP

在win7下用命令行关闭445等端口只开放特定IP

将以下文件存为.BAT,并命令提示符下运行

@echo off

title 创建IP安全策略,屏蔽135、139、445 . . . 等端口

netshipsec static add policy name=安全策略20170621

netshipsec static add filterlist name=阻止20170621

netshipsec static add filter filterlist=阻止

srcaddr=any dstaddr=Me dstport=135 protocol=TCP

netshipsec static add filter filterlist=阻止

netshipsec static add filter filterlist=阻止

srcaddr=any dstaddr=Me dstport=137 protocol=TCP

netshipsec static add filter filterlist=阻止

netshipsec static add filter filterlist=阻止

srcaddr=any dstaddr=Me dstport=138 protocol=TCP

netshipsec static add filter filterlist=阻止

netshipsec static add filter filterlist=阻止

srcaddr=any dstaddr=Me dstport=139 protocol=TCP

netshipsec static add filter filterlist=阻止

netshipsec static add filter filterlist=阻止

srcaddr=any dstaddr=Me dstport=445 protocol=TCP

netshipsec static add filter filterlist=阻止

netshipsec static add

20170621

filteraction

srcaddr=any dstaddr=Me dstport=445 protocol=UDP

name=FilteraAtion20170621 action=block

20170621

20170621

srcaddr=any dstaddr=Me dstport=139 protocol=UDP

20170621

20170621

srcaddr=any dstaddr=Me dstport=138 protocol=UDP

20170621

20170621

srcaddr=any dstaddr=Me dstport=137 protocol=UDP

20170621

20170621

srcaddr=any dstaddr=Me dstport=135 protocol=UDP

20170621

netshipsec static add rule name=Rule1 policy=安全策略

20170621 filterlist=阻止20170621

filteraction=FilteraAtion20170621

netshipsec static add filterlist name=允许20170621

netshipsec static add filter filterlist=允许

netshipsec static add filter filterlist=允许

netshipsec static add

20170621

20170621

filteraction

srcaddr=22.148.18.88 dstaddr=Me dstport=445 protocol=TCP

srcaddr=22.148.18.88 dstaddr=Me dstport=445 protocol=UDP

name=FilterbAtion20170621 action=permit

netshipsec static add rule name=Rule2 policy=安全策略

20170621 filterlist=允许20170621

filteraction=FilterbAtion20170621

netshipsec static set policy name=安全策略20170621

assign=y

exit

本文标签: 端口命令行关闭屏蔽文件