![Windows 版的 iptables 是啥?](https://linux22.com/image/531619/Windows%20%E7%89%88%E7%9A%84%20iptables%20%E6%98%AF%E5%95%A5%EF%BC%9F.png)
愚蠢的问题:
Windows 上是否有与 iptables 等效的程序?我可以通过 cygwin 安装一个吗?
真正的问题是:如何在 Windows 上实现通过 iptables 可以实现的功能?只需寻找基本的防火墙功能(例如阻止某些 IP 地址)
答案1
一种方法是使用以下netsh
命令:
netsh firewall
(XP 和 2003 之后已弃用)netsh advfirewall
(Vista、7 和 2008)
答案2
以下来自:https://support.microsoft.com/en-us/kb/947709
示例 1:启用程序
旧命令 新命令
netsh firewall add allowedprogram C:\MyApp\MyApp.exe "My Application" ENABLE
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes
netsh firewall add allowedprogram program=C:\MyApp\MyApp.exe name="My Application" mode=ENABLE scope=CUSTOM addresses=157.60.0.1,172.16.0.0/16,LocalSubnet profile=Domain netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes remoteip=157.60.0.1,172.16.0.0/16,LocalSubnet profile=domain
netsh firewall add allowedprogram program=C:\MyApp\MyApp.exe name="My Application" mode=ENABLE scope=CUSTOM addresses=157.60.0.1,172.16.0.0/16,LocalSubnet profile=ALL
运行以下命令:
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes remoteip=157.60.0.1,172.16.0.0/16,LocalSubnet profile=domain
netsh advfirewall firewall add rule name="My Application" dir=in action=allow program="C:\MyApp\MyApp.exe" enable=yes remoteip=157.60.0.1,172.16.0.0/16,LocalSubnet profile=private
有关如何添加防火墙规则的更多信息,请运行以下命令:
netsh advfirewall firewall add rule ?
示例 2:启用端口
旧命令 新命令
netsh firewall add portopening TCP 80 "Open Port 80"
netsh advfirewall firewall add rule name="Open Port 80" dir=in action=allow protocol=TCP localport=80
有关如何添加防火墙规则的更多信息,请运行以下命令:
netsh advfirewall firewall add rule ?
示例 3:删除启用的程序或端口
旧命令 新命令
netsh firewall delete allowedprogram C:\MyApp\MyApp.exe netsh advfirewall firewall delete rule name=rule name program="C:\MyApp\MyApp.exe"
delete portopening protocol=UDP port=500 netsh advfirewall firewall delete rule name=rule name protocol=udp localport=500
有关如何删除防火墙规则的更多信息,请运行以下命令:
netsh advfirewall firewall delete rule ?
示例 4:配置 ICMP 设置
旧命令 新命令
netsh firewall set icmpsetting 8 netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow
netsh firewall set icmpsetting type=ALL mode=enable netsh advfirewall firewall add rule name="All ICMP V4" protocol=icmpv4:any,any dir=in action=allow
netsh firewall set icmpsetting 13 disable all netsh advfirewall firewall add rule name="Block Type 13 ICMP V4" protocol=icmpv4:13,any dir=in action=block
有关如何配置 ICMP 设置的更多信息,请运行以下命令:
netsh advfirewall firewall add rule ?
示例 5:设置日志记录
旧命令 新命令
netsh firewall set logging %systemroot%\system32\LogFiles\Firewall\pfirewall.log 4096 ENABLE ENABLE
运行以下命令:
netsh advfirewall set currentprofile logging filename %systemroot%\system32\LogFiles\Firewall\pfirewall.log
netsh advfirewall set currentprofile logging maxfilesize 4096
netsh advfirewall set currentprofile logging droppedconnections enable
netsh advfirewall set currentprofile logging allowedconnections enable
有关更多信息,请运行以下命令:
netsh advfirewall set currentprofile ?
如果要为特定配置文件设置日志记录,请使用以下选项之一,而不是“currentprofile”选项:
Domainprofile
Privateprofile
Publicprofile
示例 6:启用 Windows 防火墙
旧命令 新命令
netsh firewall set opmode ENABLE netsh advfirewall set currentprofile state on
netsh firewall set opmode mode=ENABLE exceptions=enable
运行以下命令:
Netsh advfirewall set currentprofile state on
netsh advfirewall set currentprofile firewallpolicy blockinboundalways,allowoutbound
netsh firewall set opmode mode=enable exceptions=disable profile=domain
运行以下命令:
Netsh advfirewall set domainprofile state on
netsh advfirewall set domainprofile firewallpolicy blockinbound,allowoutbound
netsh firewall set opmode mode=enable profile=ALL Run the following commands:
netsh advfirewall set domainprofile state on
netsh advfirewall set privateprofile state on
有关更多信息,请运行以下命令:
netsh advfirewall set currentprofile ?
如果要为特定配置文件设置防火墙状态,请使用以下选项之一,而不是“currentprofile”选项:Domainprofile
Privateprofile
Publicprofile
示例 7:恢复策略默认值
旧命令 新命令
netsh firewall reset
netsh advfirewall reset
有关详细信息,请运行以下命令:netsh advfirewall reset ? 示例 8:启用特定服务
旧命令 新命令 netsh firewall set service FileAndPrint netsh advfirewall firewall set rule group="文件和打印机共享" new enable=Yes netsh firewall set service RemoteDesktop enable netsh advfirewall firewall set rule group="远程桌面" new enable=Yes netsh firewall set service RemoteDesktop enable profile=ALL 运行以下命令:
netsh advfirewall 防火墙设置规则组 =“远程桌面”新启用 = Yes 配置文件 = 域
netsh advfirewall 防火墙设置规则组 =“远程桌面”新启用 = Yes 配置文件 = private
答案3
妇女和平与工作周看起来非常有希望,特别是如果你遵循那个 iptables 规则创建风格。