How to use Windows netsh firewall command to allow only specific ipaddress on all port and deny all other ipaddress?

Question

I require a configuration of firewall which will allow me connection through only specific ip-address say 10.0.0.1 on all port ranging from 0-5555 and deny all other ip-addresses?

What will be the syntax of netsh firewall command to generate this type of rule on Windows 2008R2 machine?

score 1 · Answer 1 · edited Mar 23 '17 at 09:02

1

You can use these commands:

netsh advfirewall firewall add rule name="My Trusted In" dir=in action=allow protocol=ANY remoteip=62.9.97.12

netsh advfirewall firewall add rule name="My Trusted Out" dir=out action=allow protocol=ANY remoteip=62.9.97.12

edited Mar 23 '17 at 09:02

iwaseatenbyagrue

3,688
15
24

answered Mar 16 '17 at 15:32

teleios

11
1

1

could you give a bit of context/explanation to your answer? [Good answers](https://serverfault.com/help/how-to-answer) tend to include an answer to the question itself, as well as practical examples. – iwaseatenbyagrue Mar 23 '17 at 08:58
this solution doesn't work. – DustWolf Dec 29 '20 at 09:28

score 0 · Answer 2 · answered Feb 04 '21 at 14:51

0

this should work

    netsh advfirewall firewall set rule name="my rule" new remoteip=157.60.0.67

answered Feb 04 '21 at 14:51

suraj jain

119
4

How to use Windows netsh firewall command to allow only specific ipaddress on all port and deny all other ipaddress?

2 Answers2