附录一 6. 使用命令行工具
在 Windows 的 Server Core 模式，由于没有图形界面，必须通过命令行配置 Windows 防火墙。
6.1 启用一个程序
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes remoteip=157.60.0.1,172.16.0.0/16,LocalSubnet profile=domain
6.2 启用端口
netsh advfirewall firewall add rule name="Open Port 80" dir=in action=allow protocol=TCP localport=80
6.3 删除启用的程序或端口
netsh advfirewall firewall delete rule name=规则名称 program="C:\MyApp\MyApp.exe"
netsh advfirewall firewall delete rule name=规则名称 protocol=udp localport=500
6.4 配置 ICMP
netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow
netsh advfirewall firewall add rule name="All ICMP V4" protocol=icmpv4:any,any dir=in action=allow
netsh advfirewall firewall add rule name="Block Type 13 ICMP V4" protocol=icmpv4:13,any dir=in action=block
6.5 日志记录设置
netsh advfirewall set currentprofile logging filename %systemroot%\system32\LogFiles\Firewall\pfirewall.log
netsh advfirewall set currentprofile logging maxfilesize 4096
netsh advfirewall set currentprofile logging droppedconnections enable
netsh advfirewall set currentprofile logging allowedconnections enable
6.6 启用、重置防火墙
netsh advfirewall set currentprofile state on
netsh advfirewall reset
6.7 启用其他服务
netsh advfirewall firewall set rule group="remote desktop" new enable=Yes