发表于: 2004.10.20 10:31
分类: 技术探讨
出处: http://asier.itpub.net/post/480/3418
---------------------------------------------------------------
Rem 禁止所有通讯
ipsecpol -w REG -p "safety policy" -r "All Inbound Traffic" -f *+0 -n BLOCK -x
Rem 开通本机访问其他地址
ipsecpol -w REG -p "safety policy" -r "All outbound Traffic" -f 0+*::TCP -n PASS -x
Rem 开通镜像远程桌面访问
ipsecpol -w REG -p "safety policy" -r "Remote connection" -f *+0:3389:TCP -f 0+*:3389:TCP -n PASS -x
Rem 开通镜像ping
ipsecpol -w REG -p "safety policy" -r "ICMP ping" -f 0+*::ICMP -f *+0::ICMP -n PASS -x
Rem 开通文件共享访问
ipsecpol -w REG -p "safety policy" -r "File share" -f 0+*:445:TCP -f *+0:445:TCP -n PASS -x
Rem 开通访问web服务
ipsecpol -w REG -p "safety policy" -r "Apache web" -f *+0:80:TCP -n PASS -x
Rem 开通访问本机web-6666服务
ipsecpol -w REG -p "safety policy" -r "IIS web" -f *+0:6666:TCP -n PASS -x
Rem 开通和所有域控制器的连接
ipsecpol -w REG -p "safety policy" -r "Domain Control" -f 192.168.x.x+0 -f 192.168.x.x+0 -n PASS -x
Rem 允许特定地址访问DNS端口
ipsecpol -w REG -p "safety policy" -r "DNS ACCESS" -f 192.168.x.x+0:53:TCP -f 192.168.x.x+0:53:UDP -n PASS -x
注意,需要安装一个ipsec的安装包。











