8

我注意到当我们通过创建防火墙规则时netsh advfirewall firewall，它可以运行多次，创建多个相同的防火墙规则。

在尝试创建新规则之前，有什么方法可以检查防火墙规则是否存在？

4

5 回答 5

5

检查规则“myrule”是否不存在

netsh advfirewall firewall show rule name="myrule" | findstr "no rules"
于 2016-07-11T13:03:46.133 回答
5

为了扩展@Oleg 的答案，这是我使用的。根据您的规则的标准替换 ...。

set name="my rule"
netsh advfirewall firewall show rule name=!name! >nul
if errorlevel 1 (
    echo Adding firewall rule !name!
    netsh advfirewall firewall add rule name=!name! ...
)
于 2019-07-16T08:43:51.827 回答
5

我设法通过 PowerShell 的网络安全 Cmdlet 来解决这个问题，以下代码将检查命名防火墙规则以及指定的本地端口，如果找到条目，则不会创建规则。如果没有找到条目，它将创建规则

$firewallPort = ""
$firewallRuleName = ""

write-host "Checking for '$firewallRuleName' firewall rule on port '$firewallPort' now...."
if ($(Get-NetFirewallRule –DisplayName $firewallRuleName | Get-NetFirewallPortFilter | Where { $_.LocalPort -eq $firewallPort }))
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' already exists, not creating new rule"
}
else
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' does not already exist, creating new rule now..."
    New-NetFirewallRule -DisplayName $firewallRuleName -Direction Inbound -Profile Domain,Private,Public -Action Allow -Protocol TCP -LocalPort $firewallPort -RemoteAddress Any
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' created successfully"
}
于 2015-08-24T15:36:14.610 回答
1

为什么没有人提到|| 批处理失败的操作员？与 && 成功运算符相反

:: (if command errors) || (exec this command)
netsh advfirewall firewall show rule name="myrule" >nul || netsh advfirewall firewall add rule name="myrule" ...
于 2021-05-06T15:41:28.707 回答
0 
Get-Command -Module NetSecurity
get-help Get-NetFirewallRule -full
于 2019-07-26T15:57:40.230 回答