윈도우 2008 고급 방화벽 설정 - netsh 편
Example 1: Enable a program
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall add allowedprogram C:\MyApp\MyApp.exe "My Application" ENABLE |
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes |
|
netsh firewall add allowedprogram program=C:\MyApp\MyApp.exe name="My Application" mode=ENABLE scope=CUSTOM addresses=157.60.0.1,172.16.0.0/16,LocalSubnet profile=Domain |
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes remoteip=157.60.0.1,172.16.0.0/16,LocalSubnet profile=domain |
|
netsh firewall add allowedprogram program=C:\MyApp\MyApp.exe name="My Application" mode=ENABLE scope=CUSTOM addresses=157.60.0.1,172.16.0.0/16,LocalSubnet profile=ALL |
Run the following commands: |
Example 2: Enable a port
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall add portopening TCP 80 "Open Port 80" |
netsh advfirewall firewall add rule name="Open Port 80" dir=in action=allow protocol=TCP localport=80 |
For more information about how to add firewall rules, run the following command:
netsh advfirewall firewall add rule ?
Example 3: Delete enabled programs or ports
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall delete allowedprogram C:\MyApp\MyApp.exe |
netsh advfirewall firewall delete rule name=rule name program="C:\MyApp\MyApp.exe" |
|
delete portopening protocol=UDP port=500 |
netsh advfirewall firewall delete rule name=rule name protocol=udp localport=500 |
For more information about how to delete firewall rules, run the following command:
netsh advfirewall firewall delete rule ?
Example 4: Configure ICMP settings
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall set icmpsetting 8 |
netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow |
|
netsh firewall set icmpsetting type=ALL mode=enable |
netsh advfirewall firewall add rule name="All ICMP V4" protocol=icmpv4:any,any dir=in action=allow |
|
netsh firewall set icmpsetting 13 disable all |
netsh advfirewall firewall add rule name="Block Type 13 ICMP V4" protocol=icmpv4:13,any dir=in action=block |
Example 5: Set logging
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall set logging %systemroot%\system32\LogFiles\Firewall\pfirewall.log 4096 ENABLE ENABLE |
Run the following commands: |
Example 6: Enable Windows Firewall
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall set opmode ENABLE |
netsh advfirewall set currentprofile state on |
|
netsh firewall set opmode mode=ENABLE exceptions=enable |
Run the following commands: |
|
netsh firewall set opmode mode=enable exceptions=disable profile=domain |
Run the following commands: |
|
netsh firewall set opmode mode=enable profile=ALL |
Run the following commands: |
Example 7: Restore policy defaults
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall reset |
netsh advfirewall reset |
For more information, run the following command:
netsh advfirewall reset ?
Example 8: Enable specific services
Collapse this tableExpand this table
|
Old command |
New command |
|
netsh firewall set service FileAndPrint |
netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=Yes |
|
netsh firewall set service RemoteDesktop enable |
netsh advfirewall firewall set rule group="remote desktop" new enable=Yes |
|
netsh firewall set service RemoteDesktop enable profile=ALL |
Run the following commands: |