netsh firewall set opmode enable
%关闭病毒端口start%
netsh advfirewall firewall add rule name=”DenyTCP135-139″ dir=in action=block localport=135,136,137,138,139 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP445″ dir=in action=block localport=445 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP444″ dir=in action=block localport=444 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP5800″ dir=in action=block localport=5800 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP5900″ dir=in action=block localport=5900 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP6667″ dir=in action=block localport=6667 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyTCP28867″ dir=in action=block localport=28867 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”DenyUDP137-138″ dir=in action=block localport=137,138 remoteip=any protocol=UDP
netsh advfirewall firewall add rule name=”DenyUDP69″ dir=in action=block localport=69 remoteip=any protocol=UDP
netsh advfirewall firewall add rule name=”DenyUDP1434″ dir=in action=block localport=1434 remoteip=any protocol=UDP
%关闭病毒端口end%
%开启使用端口start%
netsh advfirewall firewall add rule name=”AllowTCP3389″ dir=in action=allow localport=3389 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP1433″ dir=in action=allow localport=1433 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP1521″ dir=in action=allow localport=1521 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP3306″ dir=in action=allow localport=3306 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP80″ dir=in action=allow localport=80 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP8080-8088″ dir=in action=allow localport=8080,8081,8082,8083,8084,8085,8086,8087,8088 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP443″ dir=in action=allow localport=443 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP8890″ dir=in action=allow localport=8890 remoteip=any protocol=tcp
netsh advfirewall firewall add rule name=”AllowTCP234″ dir=in action=allow localport=234 remoteip=any protocol=tcp
%开启使用端口end%
%启用密码策略，审计开启，不显示最后一次登录账户，屏保%
pause()
