Difference between revisions of "Configuring Windows XP firewall"

From WPKG | Open Source Software Deployment and Distribution
Jump to: navigation, search
m (Disabling Windows XP firewall moved to Configuring Windows XP firewall: For program installation it is more useful to add rules to the firewall than disabling it. I added rules for ports and programs, so the title would be misleading.)
m (Added optional values)
Line 13: Line 13:
 
To add a program to the exception list:
 
To add a program to the exception list:
 
  add allowedprogram program = [path] name = [name] mode = [ENABLE|DISABLE] scope = [ALL|SUBNET|CUSTOM] addresses = [addresses] profile = [CURRENT|DOMAIN|STANDARD|ALL]
 
  add allowedprogram program = [path] name = [name] mode = [ENABLE|DISABLE] scope = [ALL|SUBNET|CUSTOM] addresses = [addresses] profile = [CURRENT|DOMAIN|STANDARD|ALL]
You might want to check the article in the [http://technet.microsoft.com/en-us/library/bb490617.aspx MS Windows XP TechCenter] for detailed explanation.
+
Everything besides 'program' and 'name' is optional. You might want to check the article in the [http://technet.microsoft.com/en-us/library/bb490617.aspx MS Windows XP TechCenter] for default values and a detailed explanation.
  
 
[[Category: Silent Installers]]
 
[[Category: Silent Installers]]
 
[[Category: Changing Windows settings]]
 
[[Category: Changing Windows settings]]

Revision as of 02:23, 11 February 2008

To disable Windows XP firewall, you have to execute the following:

netsh firewall set opmode disable

It is enough to execute it only once, as it will survive the reboot, so you may use execute="once".


To add ports to the exception list:

netsh firewall add portopening [protocol] [port number] [rule name]

[protocol] can be TCP or UDP (remove the brackets when you insert your values).


To add a program to the exception list:

add allowedprogram program = [path] name = [name] mode = [ENABLE|DISABLE] scope = [ALL|SUBNET|CUSTOM] addresses = [addresses] profile = [CURRENT|DOMAIN|STANDARD|ALL]

Everything besides 'program' and 'name' is optional. You might want to check the article in the MS Windows XP TechCenter for default values and a detailed explanation.