Asier的blog,欢迎志同道合之士前来拜访...
===========================================================
IPSec策略实施方法
===========================================================

Rem 禁止所有通讯
ipsecpol -w REG -p "safety policy" -r "All Inbound Traffic" -f *+0 -n BLOCK -x

Rem 开通本机访问其他地址
ipsecpol -w REG -p "safety policy" -r "All outbound Traffic" -f 0+*::TCP -n PASS -x

Rem 开通镜像远程桌面访问
ipsecpol -w REG -p "safety policy" -r "Remote connection" -f *+0:3389:TCP -f 0+*:3389:TCP -n PASS -x

Rem 开通镜像ping
ipsecpol -w REG -p "safety policy" -r "ICMP ping" -f 0+*::ICMP -f *+0::ICMP -n PASS -x

Rem 开通文件共享访问
ipsecpol -w REG -p "safety policy" -r "File share" -f 0+*:445:TCP -f *+0:445:TCP -n PASS -x

Rem 开通访问web服务
ipsecpol -w REG -p "safety policy" -r "Apache web" -f *+0:80:TCP -n PASS -x

Rem 开通访问本机web-6666服务
ipsecpol -w REG -p "safety policy" -r "IIS web" -f *+0:6666:TCP -n PASS -x

Rem 开通和所有域控制器的连接
ipsecpol -w REG -p "safety policy" -r "Domain Control" -f 192.168.x.x+0 -f 192.168.x.x+0 -n PASS -x

Rem 允许特定地址访问DNS端口
ipsecpol -w REG -p "safety policy" -r "DNS ACCESS" -f 192.168.x.x+0:53:TCP -f 192.168.x.x+0:53:UDP -n PASS -x

注意,需要安装一个ipsec的安装包。


Asier 发表于:2004.10.20 10:31 ::分类: ( 技术探讨 ) ::阅读:(952次) :: Permanent link
re: IPSec策略实施方法 [回复]

Good site! Thanks. [url=https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--20]buy soma[/url] buy soma https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--20 [url=https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--21]buy xanax[/url] buy xanax https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--21 [url=https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--23]cialis drug viagra vs[/url] cialis drug viagra vs https://itc.utk.edu/cgi-bin/netforum/adv490/a/3--23

naMevrain 评论于: 2007.05.07 12:16
re: IPSec策略实施方法 [回复]

Good site! Thanks. [url=https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--26?lipitor-grapefruit]lipitor grapefruit[/url] lipitor grapefruit https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--26?lipitor-grapefruit [url=https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--27?prozac-side-effects]prozac side effects[/url] prozac side effects https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--27?prozac-side-effects [url=https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--28?drug-sample-viagra]drug sample viagra[/url] drug sample viagra https://itc.utk.edu/cgi-bin/netforum/maes551/a/3--28?drug-sample-viagra

Uduru 评论于: 2007.05.07 17:13
re: IPSec策略实施方法 [回复]

Good site! Thanks. [url=https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--16?cialis-levitra]cialis levitra[/url] cialis levitra https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--16?cialis-levitra [url=https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--17?buy+cialis+online+say+wordpress]buy cialis online say wordpress[/url] buy cialis online say wordpress https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--17?buy+cialis+online+say+wordpress [url=https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--18?cialis-comparison-levitra-viagra]cialis comparison levitra viagra[/url] cialis comparison levitra viagra https://itc.utk.edu/cgi-bin/netforum/hewlett/a/3--18?cialis-comparison-levitra-viagra

Janin 评论于: 2007.05.07 17:13
re: IPSec策略实施方法 [回复]

Good site! Thanks. [url=https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--71?cialis-soft-tabs]cialis soft tabs[/url] cialis soft tabs https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--71?cialis-soft-tabs [url=https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--72?generic-soma]generic soma[/url] generic soma https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--72?generic-soma [url=https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--73?kisa-soma]kisa soma[/url] kisa soma https://itc.utk.edu/cgi-bin/netforum/ohld390/a/3--73?kisa-soma

Acib 评论于: 2007.05.07 23:00
re: IPSec策略实施方法 [回复]

Nice work! [url=https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--17?buy-viagra-now-online]buy viagra now online[/url] buy viagra now online https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--17?buy-viagra-now-online [url=https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--19?poker-viagra]poker viagra[/url] poker viagra https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--19?poker-viagra [url=https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--20?buy-xenical]buy xenical[/url] buy xenical https://itc.utk.edu/cgi-bin/netforum/soil-sci/a/3--20?buy-xenical

Zzhoren 评论于: 2007.05.08 02:05
Real Estate Agents that try to rip you off! [回复]

rosie@triad29.com
rosieponder@verizon.net
Not only do they try to rip you off, they send your email out and you get a ton of junk mail.

acallordard 评论于: 2008.03.08 04:03
自我介绍
切换风格
新闻聚合
博客日历
文章归档...
最新发表...
博客统计...
Blog信息
网站链接...