阻止在win7下用命令行关闭445等端口只开放特定IP

在win7下用命令行关闭445等端口只开放特定IP

将以下文件存为.BAT,并命令提示符下运行

@echo offtitle创建IP安全策略屏蔽135、 139、 445. . .等端口netshipsec static add pol icy name=安全策略20170621netshipsec static add fi lterl ist name=阻止20170621netshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=135protocol=TCPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=135protocol=UDPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=137protocol=TCPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=137protocol=UDPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=138protocol=TCPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=138protocol=UDPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=139protocol=TCPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=139protocol=UDP

netshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=445protocol=TCPnetshipsec static add fi lter fi lterl ist=阻止20170621 srcaddr=any dstaddr=Me dstport=445protocol=UDPnetshipsec static add fi lteraction name=Fi lteraAtion20170621 action=blocknetshipsec static add rule name=Rule1 pol icy=安全策略20170621 fi lterl ist=阻止20170621 fi lteraction=Fi lteraAtion20170621netshipsec static add fi lterl ist name=允许20170621netshipsec static add fi lter fi lterl ist=允许20170621 srcaddr=22.148.18.88 dstaddr=Medstport=445 protocol=TCPnetshipsec static add fi lter fi lterl ist=允许20170621 srcaddr=22.148.18.88 dstaddr=Medstport=445 protocol=UDPnetshipsec static add fi lteraction name=Fi lterbAtion20170621 action=permitnetshipsec static add rule name=Rule2 pol icy=安全策略20170621 fi lterl ist=允许20170621 fi lteraction=Fi lterbAtion20170621netshipsec static set pol icy name=安全策略20170621 assign=yexit