Sha*_*neC 8 windows firewall rules idempotent netsh
我注意到,当我们通过 来创建防火墙规则时netsh advfirewall firewall,它可以运行多次,从而创建多个相同的防火墙规则。
在尝试创建新规则之前,有没有办法检查防火墙规则是否存在?
为了扩展@Oleg的答案,这是我使用的。根据您的规则标准替换...。
set name="my rule"
netsh advfirewall firewall show rule name=!name! >nul
if errorlevel 1 (
echo Adding firewall rule !name!
netsh advfirewall firewall add rule name=!name! ...
)
Run Code Online (Sandbox Code Playgroud)
我设法通过 PowerShell 的网络安全 Cmdlet 完成此操作,以下代码将检查命名防火墙规则以及指定的本地端口,如果找到条目,则不会创建规则。如果没有找到条目,它将创建规则
$firewallPort = ""
$firewallRuleName = ""
write-host "Checking for '$firewallRuleName' firewall rule on port '$firewallPort' now...."
if ($(Get-NetFirewallRule –DisplayName $firewallRuleName | Get-NetFirewallPortFilter | Where { $_.LocalPort -eq $firewallPort }))
{
write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' already exists, not creating new rule"
}
else
{
write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' does not already exist, creating new rule now..."
New-NetFirewallRule -DisplayName $firewallRuleName -Direction Inbound -Profile Domain,Private,Public -Action Allow -Protocol TCP -LocalPort $firewallPort -RemoteAddress Any
write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' created successfully"
}
Run Code Online (Sandbox Code Playgroud)
小智 5
检查规则“myrule”是否不存在
netsh advfirewall firewall show rule name="myrule" | findstr "no rules"
Run Code Online (Sandbox Code Playgroud)