重复的 Windows 防火墙规则(Netsh AdvFirewall 防火墙)

Sha*_*neC 8 windows firewall rules idempotent netsh

我注意到,当我们通过 来创建防火墙规则时netsh advfirewall firewall,它可以运行多次,从而创建多个相同的防火墙规则。

在尝试创建新规则之前,有没有办法检查防火墙规则是否存在?

ouk*_*ouk 6

为了扩展@Oleg的答案,这是我使用的。根据您的规则标准替换...。

set name="my rule"
netsh advfirewall firewall show rule name=!name! >nul
if errorlevel 1 (
    echo Adding firewall rule !name!
    netsh advfirewall firewall add rule name=!name! ...
)
Run Code Online (Sandbox Code Playgroud)


Sha*_*neC 5

我设法通过 PowerShell 的网络安全 Cmdlet 完成此操作,以下代码将检查命名防火墙规则以及指定的本地端口,如果找到条目,则不会创建规则。如果没有找到条目,它将创建规则

$firewallPort = ""
$firewallRuleName = ""

write-host "Checking for '$firewallRuleName' firewall rule on port '$firewallPort' now...."
if ($(Get-NetFirewallRule –DisplayName $firewallRuleName | Get-NetFirewallPortFilter | Where { $_.LocalPort -eq $firewallPort }))
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' already exists, not creating new rule"
}
else
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' does not already exist, creating new rule now..."
    New-NetFirewallRule -DisplayName $firewallRuleName -Direction Inbound -Profile Domain,Private,Public -Action Allow -Protocol TCP -LocalPort $firewallPort -RemoteAddress Any
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' created successfully"
}
Run Code Online (Sandbox Code Playgroud)


小智 5

检查规则“myrule”是否不存在

netsh advfirewall firewall show rule name="myrule" | findstr "no rules"
Run Code Online (Sandbox Code Playgroud)

  • 解析结果文本中的英语单词并不安全,因为用户可能使用不同的操作系统语言,或者措辞最终可能会发生变化。 (2认同)