netsh firewall show allowedprogram //查看防火牆放行的程序
netsh firewall set portopening TCP 445 ENABLE //打開445端口
netsh firewall set portopening TCP 3389 ENABLE //放行終端
netsh firewall delete allowedprogram C:\A.exe //刪除放行程序A.exe
netsh firewall set allowedprogram C:\A.exe A ENABLE //添加程序C盤下的A.exe並放行
netsh firewall add allowedprogram C:\A.exe A ENABLE //添加程序C盤下的A.exe並放行
set allowedprogram和add allowedprogram效果一樣都可以添加放行程序?
小玩一下，允許或拒絕某臺IP不能訪問遠程端口，netsh firewall set portopening TCP 3389 遠程桌面 enable/disable custom 192.168.10.100，也可以設置一個網段:IP/24
SQL2008開啓防火牆設置：
netsh firewall set portopening TCP 1433 SQLServer
netsh firewall set portopening TCP 1434 SQL Admin Connection
netsh firewall set portopening TCP 4022 SQL Server Broker
netsh firewall set portopening TCP 135 SQL Debugger/RPC
netsh firewall set portopening TCP 2383 SAnalysis Services
netsh firewall set portopening TCP 2382 SQL Browser
netsh int ip reset c:\resetlog.txt 重裝TCP/協議並保存日誌記錄至C盤