public FwErrorCode IsPortEnabled(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, ref bool bEnable) { if (_mFirewallProfile == null) { return(FwErrorCode.FwErrInitialized); } // Retrieve the open ports collection INetFwOpenPorts fwOpenPorts = _mFirewallProfile.GloballyOpenPorts; if (fwOpenPorts == null) { return(FwErrorCode.FwErrGlobalOpenPorts); } // Get the open port try { INetFwOpenPort fwOpenPort = fwOpenPorts.Item(nPortNumber, ipProtocol); bEnable = fwOpenPort?.Enabled == true; } catch (System.IO.FileNotFoundException) { bEnable = false; } return(FwErrorCode.FwNoerror); }
public bool IsPortEnabled(int port, NET_FW_IP_PROTOCOL_ ipProtocol) { DoDisposeCheck(); DoInitializationCheck(); bool result = false; // Retrieve the open ports collection INetFwOpenPorts firewallOpenPorts = mFirewallProfile.GloballyOpenPorts; if (firewallOpenPorts == null) { throw new FirewallException("Failed to get globally open ports."); } // Get the open port try { INetFwOpenPort firewallOpenPort = firewallOpenPorts.Item(port, ipProtocol); if (firewallOpenPort != null) { result = firewallOpenPort.Enabled; } } catch (Exception) { } return(result); }
// example: AddPort(true, "TCP Port", Int32.Parse(port.Text), NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP); public static bool AddPort(bool enabled, string name, int port, NET_FW_IP_PROTOCOL_ protocol) { // Add the port to the ICF Permissions List INetFwMgr mgr = null; try { mgr = (NetFwTypeLib.INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); } catch { // XPSP2 not installed return false; } try { INetFwProfile profile; INetFwOpenPort portClass = (NetFwTypeLib.INetFwOpenPort)Activator.CreateInstance( Type.GetTypeFromProgID("HNetCfg.FWOpenPort")); // Get the current profile profile = mgr.LocalPolicy.CurrentProfile; // Set the port properties portClass.Enabled = enabled; portClass.Name = name; portClass.Port = port; portClass.Protocol = protocol; // Add the port to the ICF Permissions List profile.GloballyOpenPorts.Add(portClass); return true; } catch { // Log the error or prompt the user return false; } }
public FW_ERROR_CODE IsPortEnabled(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, ref bool bEnable) { if (m_FirewallProfile == null) { return(FW_ERROR_CODE.FW_ERR_INITIALIZED); } // Retrieve the open ports collection INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) { return(FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS); } // Get the open port try { INetFwOpenPort FWOpenPort = FWOpenPorts.Item(nPortNumber, ipProtocol); if (FWOpenPort != null) { bEnable = FWOpenPort.Enabled; } else { bEnable = false; } } catch (FileNotFoundException) { bEnable = false; } return(FW_ERROR_CODE.FW_NOERROR); }
/// <summary> /// 添加防火墙例外端口 /// </summary> /// <param name="name">名称</param> /// <param name="port">端口</param> /// <param name="protocol">协议(TCP、UDP)</param> public static void NetFwAddPorts(string name, int port, NET_FW_IP_PROTOCOL_ protocol) { var serviceControllers = ServiceController.GetServices(); string fireWallServiceName; Version currentVersion = Environment.OSVersion.Version; if (currentVersion.Major == 5) { fireWallServiceName = "sharedaccess"; } else { fireWallServiceName = "mpssvc"; } var server = serviceControllers.FirstOrDefault(service => service.ServiceName.ToLower() == fireWallServiceName); if (server != null && server.Status == ServiceControllerStatus.Running) { //创建firewall管理类的实例 INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); INetFwOpenPort objPort = (INetFwOpenPort)Activator.CreateInstance( Type.GetTypeFromProgID("HNetCfg.FwOpenPort")); objPort.Name = name; objPort.Port = port; objPort.Protocol = protocol; objPort.Scope = NET_FW_SCOPE_.NET_FW_SCOPE_ALL; objPort.Enabled = true; //加入到防火墙的管理策略,若已存在会启用该规则 netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(objPort); } }
public static void CreateRuleAllow(string ruleName, string ip, int port, NET_FW_IP_PROTOCOL_ protocol) { RemoveRule(ruleName); try { INetFwRule2 inboundRule = (INetFwRule2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FWRule")); INetFwPolicy2 firewallPolicy = (INetFwPolicy2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwPolicy2")); inboundRule.Name = ruleName; inboundRule.Description = $"Allow inbound traffic from users over port {port}"; inboundRule.Action = NET_FW_ACTION_.NET_FW_ACTION_ALLOW; inboundRule.Profiles = (int)NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_ALL; inboundRule.Protocol = (int)protocol; //inboundRule.Direction = NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_IN; //inboundRule.Grouping = "@firewallapi.dll,-23255"; inboundRule.RemoteAddresses = ip; inboundRule.LocalPorts = port.ToString(); inboundRule.Enabled = true; firewallPolicy.Rules.Add(inboundRule); Logger.White($" [Firewall] Allow {(protocol == NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP ? "Tcp" : protocol == NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP ? "Udp" : "Unknown")} connection rule on port {port} has been registered in windows firewall."); firewallPolicy = null; inboundRule = null; } catch (Exception ex) { Logger.Exception(ex); } }
public bool RemovePort(int port, NET_FW_IP_PROTOCOL_ ipProtocol) { DoDisposeCheck(); DoInitializationCheck(); bool changed = false; if (IsPortEnabled(port, ipProtocol)) { // Retrieve the collection of globally open ports INetFwOpenPorts firewallOpenPorts = mFirewallProfile.GloballyOpenPorts; if (firewallOpenPorts == null) { throw new FirewallException("Failed to get globally open ports."); } try { firewallOpenPorts.Remove(port, ipProtocol); changed = true; } catch (Exception ex) { throw new FirewallException("Failed to remove port.", ex); } } return(changed); }
public static void AddFirewallRule(NET_FW_IP_PROTOCOL_ protocol, string remoteAddress, string port, string processPath) { if (!IsUserAdmin()) { MessageBox.Show("You need to run the application as administrator to use this feature.", "Admin rights required", MessageBoxButtons.OK, MessageBoxIcon.Exclamation); return; } INetFwPolicy2 fwPolicy2 = GetFwPolicy2(); var currentProfiles = fwPolicy2.CurrentProfileTypes; // New rule. INetFwRule2 inboundRule = (INetFwRule2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FWRule")); inboundRule.Enabled = true; inboundRule.Action = NET_FW_ACTION_.NET_FW_ACTION_BLOCK; inboundRule.Direction = NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_IN; inboundRule.Protocol = (int)protocol; inboundRule.LocalPorts = port; inboundRule.RemoteAddresses = remoteAddress; inboundRule.ApplicationName = processPath; inboundRule.Name = RuleName; inboundRule.Profiles = currentProfiles; // Adding rule. fwPolicy2.Rules.Add(inboundRule); }
// example: RemovePort(Int32.Parse(port.Text), NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP); public static bool RemovePort(int port, NET_FW_IP_PROTOCOL_ protocol) { // Remove the port to the ICF Permissions List INetFwMgr mgr = null; try { mgr = (NetFwTypeLib.INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); } catch { // XPSP2 not installed return(false); } try { INetFwProfile profile; // Get the current profile profile = mgr.LocalPolicy.CurrentProfile; // Remove the port to the ICF Permissions List profile.GloballyOpenPorts.Remove(port, protocol); return(true); } catch { // Log the error or prompt the user return(false); } }
/// <summary> /// Creates a new port entry in the firewall collection. /// </summary> /// <param name="port">The port number.</param> /// <param name="name">The name of the port.</param> /// <param name="protocol">The protocol used.</param> /// <param name="scope">The scope of the control.</param> public void OpenFirewallPort(int port, string name, NET_FW_IP_PROTOCOL_ protocol, NET_FW_SCOPE_ scope) { // Set the current access profile. SetProfile(); // Get the current globall // open port profile control. INetFwOpenPorts openPorts = fwProfile.GloballyOpenPorts; // Create a new instance of the // open new port type. INetFwOpenPort openPort = (INetFwOpenPort)GetInstance("INetOpenPort"); // Assign the port specifications. openPort.Port = port; openPort.Name = name; openPort.Scope = scope; openPort.Protocol = protocol; // Add the new port to the // collection of ports. openPorts.Add(openPort); openPorts = null; }
public PortInfo(int portNumber) { imageFileName = null; ipVersion = NET_FW_IP_VERSION_.NET_FW_IP_VERSION_V4; this.portNumber = portNumber; localAddress = null; ipProtocol = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP; }
public FW_ERROR_CODE AddPort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, string strRegisterName) { if (m_FirewallProfile == null) { return(FW_ERROR_CODE.FW_ERR_INITIALIZED); } bool bEnablePort = true; FW_ERROR_CODE nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FW_ERROR_CODE.FW_NOERROR) { return(nError); } // Only add the port, if it isn't added to the collection if (bEnablePort == false) { // Retrieve the collection of globally open ports INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) { return(FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS); } // Create an instance of an open port Type typeFwPort = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); var FWOpenPort = (INetFwOpenPort)Activator.CreateInstance(typeFwPort); if (FWOpenPort == null) { return(FW_ERROR_CODE.FW_ERR_CREATE_PORT_INSTANCE); } // Set the port number FWOpenPort.Port = nPortNumber; // Set the IP Protocol FWOpenPort.Protocol = ipProtocol; // Set the registered name FWOpenPort.Name = strRegisterName; try { FWOpenPorts.Add(FWOpenPort); } catch { return(FW_ERROR_CODE.FW_ERR_ADD_TO_COLLECTION); } } else { return(FW_ERROR_CODE.FW_ERR_SAME_PORT_EXIST); } return(FW_ERROR_CODE.FW_NOERROR); }
public TestFirewallRule(string name, string ports, NET_FW_IP_PROTOCOL_ protocol, NET_FW_RULE_DIRECTION_ direction, string appPath, string grouping) { this.Name = name; this.Ports = ports; this.Protocol = protocol; this.Direction = direction; this.ApplicationPath = appPath; this.Grouping = grouping; }
private bool _IsPortOpen(INetFwProfile profile) { NET_FW_IP_PROTOCOL_ protocol = _GetProtocol(); if (!profile.FirewallEnabled) { return(true); } return(profile.GloballyOpenPorts.Cast <INetFwOpenPort>().Any(p => p.Protocol == protocol && p.Port == _Port)); }
public static void RemovePortExceptionFromSP2Firewall(int port, NET_FW_IP_PROTOCOL_ protocol) { // Instantiating the HNetCfg.NetFwMgr object to get "LocalPolicy" and then "CurrentProfile" INetFwMgr fwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromCLSID(new Guid(INetFwMgrGuid)), true); INetFwPolicy fwPolicy = fwMgr.LocalPolicy; INetFwProfile fwProfile = fwPolicy.CurrentProfile; // Remove application from exception rule list fwProfile.GloballyOpenPorts.Remove(port, protocol); }
public static ProtocolPort Convert(NET_FW_IP_PROTOCOL_ item) { switch (item) { case NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP: return(ProtocolPort.Tcp); case NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP: return(ProtocolPort.Udp); default: return(ProtocolPort.Any); } }
private INetFwOpenPort GetPortObj(string portNumber, NET_FW_IP_PROTOCOL_ ipProtocol) { Type tpResult = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); INetFwOpenPort port = (INetFwOpenPort)Activator.CreateInstance(tpResult); port.Port = Int32.Parse(portNumber); // port number port.Name = appName; // name of the application using the port port.Enabled = true; // enable the port port.Protocol = ipProtocol; return(port); }
public FwErrorCode AddPort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, string strRegisterName) { if (_mFirewallProfile == null) { return(FwErrorCode.FwErrInitialized); } bool bEnablePort = true; FwErrorCode nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FwErrorCode.FwNoerror) { return(nError); } // Only add the port, if it isn't added to the collection if (bEnablePort == false) { // Retrieve the collection of globally open ports INetFwOpenPorts fwOpenPorts = _mFirewallProfile.GloballyOpenPorts; if (fwOpenPorts == null) { return(FwErrorCode.FwErrGlobalOpenPorts); } // Create an instance of an open port Type typeFwPort = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); var fwOpenPort = (INetFwOpenPort)Activator.CreateInstance(typeFwPort); // Set the port number fwOpenPort.Port = nPortNumber; // Set the IP Protocol fwOpenPort.Protocol = ipProtocol; // Set the registered name fwOpenPort.Name = strRegisterName; try { fwOpenPorts.Add(fwOpenPort); } catch { return(FwErrorCode.FwErrAddToCollection); } } else { return(FwErrorCode.FwErrSamePortExist); } return(FwErrorCode.FwNoerror); }
private void OpenPort(string name, int port, NET_FW_IP_PROTOCOL_ protocol, NET_FW_SCOPE_ scope) { if (openPorts.OfType <INetFwOpenPort>().Where(x => x.Name == name).Count() == 0) { INetFwOpenPort openPort = (INetFwOpenPort)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwOpenPort")); openPort.Port = port; openPort.Protocol = protocol; openPort.Scope = scope; openPort.Name = name; openPorts.Add(openPort); } }
/// <summary> /// Removes the port entry from the firewall collection. /// </summary> /// <param name="port">The port number.</param> /// <param name="protocol">The protocol used.</param> public void CloseFirewallPort(int port, NET_FW_IP_PROTOCOL_ protocol) { // Set the current access profile. SetProfile(); // Get the current globall // open port profile control. INetFwOpenPorts openPorts = fwProfile.GloballyOpenPorts; // Remove the specified port from the collection. openPorts.Remove(port, protocol); openPorts = null; }
public bool AddPort(int port, NET_FW_IP_PROTOCOL_ ipProtocol, string registeredName) { DoDisposeCheck(); DoInitializationCheck(); if (string.IsNullOrEmpty(registeredName)) { ThrowHelper.ThrowArgumentNullException("registeredName"); } bool result = false; if (!IsPortEnabled(port, ipProtocol)) { // Retrieve the collection of globally open ports INetFwOpenPorts firewallOpenPorts = mFirewallProfile.GloballyOpenPorts; if (firewallOpenPorts == null) { throw new FirewallException("Failed to get globally open ports."); } // Create an instance of an open port Type firewallPortType = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); INetFwOpenPort firewallOpenPort = (INetFwOpenPort)Activator.CreateInstance(firewallPortType); if (firewallOpenPort == null) { throw new FirewallException("Failed to create port instance."); } // Set the port number firewallOpenPort.Port = port; // Set the IP Protocol firewallOpenPort.Protocol = ipProtocol; // Set the registered name firewallOpenPort.Name = registeredName; try { firewallOpenPorts.Add(firewallOpenPort); result = true; } catch (Exception ex) { throw new FirewallException("Failed to add port.", ex); } } return(result); }
public static void AddPortExceptionToSP2Firewall(string name, int port, NET_FW_IP_PROTOCOL_ protocol) { // Instantiating the HNetCfg.NetFwMgr object to get "LocalPolicy" and then "CurrentProfile" INetFwMgr fwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromCLSID(new Guid(INetFwMgrGuid)), true); INetFwPolicy fwPolicy = fwMgr.LocalPolicy; INetFwProfile fwProfile = fwPolicy.CurrentProfile; INetFwOpenPort fwOpenPort = (INetFwOpenPort)Activator.CreateInstance( Type.GetTypeFromCLSID(new Guid(INetFwOpenPortGuid)), true); fwOpenPort.Name = name; fwOpenPort.Port = port; fwOpenPort.Protocol = protocol; fwOpenPort.Enabled = true; fwProfile.GloballyOpenPorts.Add(fwOpenPort); }
private void CreateRuleOut(String RuleName, String Desc, NET_FW_IP_PROTOCOL_ Protocol, String RemotePorts, NET_FW_RULE_DIRECTION_ Direction, INetFwPolicy2 fwPolicy2) { Type typeFWRule = Type.GetTypeFromProgID("HNetCfg.FwRule", false); INetFwRule newRule = (INetFwRule)Activator.CreateInstance(typeFWRule); newRule.Name = RuleName; newRule.Description = Desc; newRule.Protocol = (int)Protocol; newRule.RemotePorts = RemotePorts; newRule.RemoteAddresses = txtRemoteAddress.Text.Replace(" ", "").Replace("\r\n", ","); newRule.Direction = Direction; newRule.Enabled = true; newRule.Grouping = "Elasticsearch"; //newRule.Profiles = fwPolicy2.CurrentProfileTypes; newRule.Action = NET_FW_ACTION_.NET_FW_ACTION_ALLOW; fwPolicy2.Rules.Add(newRule); }
/// <summary> /// Authorizes a program to receive incoming communications through Windows Firewall. If this fails (typically due to insufficient permission), the exception is returned. /// </summary> /// <param name="title">The title of the firewall rule/program.</param> /// <param name="path">Path to the executable that should be authorized.</param> /// <param name="remoteAddresses">Comma separated list of remote addresses to authorize, or "*" for all.</param> /// <param name="protocol">Internet protocol version.</param> /// <param name="networkProfiles">Internet protocol version.</param> /// <returns></returns> public static Exception AuthorizeProgram(string title , string path , string remoteAddresses = "*" , NET_FW_IP_PROTOCOL_ protocol = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_ANY , NET_FW_PROFILE_TYPE2_ networkProfiles = NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_DOMAIN | NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PRIVATE) { try { INetFwPolicy2 fwPolicy2 = Create <INetFwPolicy2>("HNetCfg.FwPolicy2"); foreach (INetFwRule existingRule in fwPolicy2.Rules) { if (path.Equals(existingRule.ApplicationName, StringComparison.OrdinalIgnoreCase)) { if (existingRule.Protocol == (int)protocol && existingRule.Profiles == (int)networkProfiles && existingRule.Action == NET_FW_ACTION_.NET_FW_ACTION_ALLOW && existingRule.Enabled) { if (existingRule.RemoteAddresses != remoteAddresses) { existingRule.RemoteAddresses = remoteAddresses; } return(null); } } } INetFwRule rule = Create <INetFwRule>("HNetCfg.FwRule"); rule.Name = title; rule.Description = "Allow incoming traffic to " + title; rule.ApplicationName = path; rule.Protocol = (int)protocol; rule.Enabled = true; rule.Grouping = title; rule.RemoteAddresses = remoteAddresses; rule.Profiles = (int)networkProfiles; rule.Action = NET_FW_ACTION_.NET_FW_ACTION_ALLOW; fwPolicy2.Rules.Add(rule); } catch (Exception ex) { return(ex); } return(null); }
public bool RemovePort(int portNo, bool isUDP) { bool result = false; INetFwMgr manager = _GetFirewallManager(); NET_FW_IP_PROTOCOL_ protocol = isUDP ? NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP : NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP; try { manager.LocalPolicy.CurrentProfile.GloballyOpenPorts.Remove(portNo, protocol); result = true; } catch (Exception ex) { Logger.error(ex.ToString()); } return(result); }
private FirewallRule GetDynamicPortRangeExceptionRule(string direction, string protocol, NET_FW_PROFILE_TYPE2_ fwProfile) { string ruleName = string.Format( CultureInfo.InvariantCulture, FabricNodeFirewallRules.DynamicPortRangeExceptionTemplate, this.NodeName, protocol, GetProfileFriendlyName(fwProfile), direction); NET_FW_IP_PROTOCOL_ fwProtocol = protocol == FabricNodeFirewallRules.ProtocolTcp ? NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP : NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP; NET_FW_RULE_DIRECTION_ fwDirection = direction == FabricNodeFirewallRules.inDirection ? NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_IN : NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_OUT; return(GetRule(ruleName, null, this.DynamicPorts, fwProtocol, fwDirection, fwProfile)); }
public static void EnableInboundPort(NET_FW_IP_PROTOCOL_ protocol, int port, string description) { try { INetFwRule firewallRule = (INetFwRule)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FWRule")); firewallRule.Action = NET_FW_ACTION_.NET_FW_ACTION_ALLOW; firewallRule.Name = description; firewallRule.Direction = NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_IN; firewallRule.Protocol = (int)protocol; firewallRule.LocalPorts = port.ToString(); firewallRule.Enabled = true; firewallRule.InterfaceTypes = "All"; INetFwPolicy2 firewallPolicy = (INetFwPolicy2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwPolicy2")); firewallPolicy.Rules.Add(firewallRule); } catch (Exception) { } }
/// <summary> /// Open port in network windows firewall /// </summary> /// <param name="name"></param> /// <param name="portNo"></param> /// <param name="scope"></param> /// <param name="protocol"></param> /// <param name="ipVersion"></param> /// <returns></returns> public static bool GloballyOpenPort(string name, int portNo, NET_FW_SCOPE_ scope, NET_FW_IP_PROTOCOL_ protocol, NET_FW_IP_VERSION_ ipVersion) { INetFwMgr manager = GetFirewallManager(); try { // Check if port does not exists. bool exists = false; foreach (INetFwOpenPort openPort in manager.LocalPolicy.CurrentProfile.GloballyOpenPorts) { if (openPort.Name == name && openPort.Port == portNo) { exists = true; break; } } if (!exists) { // Create the type from prog id Type type = Type.GetTypeFromProgID(PROGID_OPEN_PORT); // Create instance that provides access to the properties of a port that has been opened in the firewall. INetFwOpenPort port = Activator.CreateInstance(type) as INetFwOpenPort; // Set properties for port port.Name = name; port.Port = portNo; port.Scope = scope; port.Protocol = protocol; port.IpVersion = ipVersion; // Add open port to windows firewall manager.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(port); } } catch (Exception ex) { return(false); } return(true); }
// WINDOWS防火墙添加例外端口,name端口名,portNum端口号,type端口类型 public static bool addFirewallPort(string name, int portNum, NET_FW_IP_PROTOCOL_ type) { try { // 创建端口接口实例 INetFwOpenPort port = createInstance <INetFwOpenPort>(Type.GetTypeFromProgID("HNetCfg.FwOpenPort")); port.Name = name; //端口名 port.Port = portNum; //端口号 port.Protocol = type; //协议类型 port.Enabled = true; //启用 // 创建firewall管理接口的实例 INetFwMgr netFwMgr = createInstance <INetFwMgr>(Type.GetTypeFromProgID("HNetCfg.FwMgr")); netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(port); return(true); } catch { return(false); } }
// example: AddPort(true, "TCP Port", Int32.Parse(port.Text), NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP); public static bool AddPort(bool enabled, string name, int port, NET_FW_IP_PROTOCOL_ protocol) { // Add the port to the ICF Permissions List INetFwMgr mgr = null; try { mgr = (NetFwTypeLib.INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); } catch { // XPSP2 not installed return(false); } try { INetFwProfile profile; INetFwOpenPort portClass = (NetFwTypeLib.INetFwOpenPort)Activator.CreateInstance( Type.GetTypeFromProgID("HNetCfg.FWOpenPort")); // Get the current profile profile = mgr.LocalPolicy.CurrentProfile; // Set the port properties portClass.Enabled = enabled; portClass.Name = name; portClass.Port = port; portClass.Protocol = protocol; // Add the port to the ICF Permissions List profile.GloballyOpenPorts.Add(portClass); return(true); } catch { // Log the error or prompt the user return(false); } }
private static bool GloballyOpenPort(string title, int portNo, NET_FW_SCOPE_ scope, NET_FW_IP_PROTOCOL_ protocol/*, NET_FW_IP_VERSION_ ipVersion*/, INetFwMgr manager) { Type type = Type.GetTypeFromProgID(PROGID_OPEN_PORT); INetFwOpenPort port = Activator.CreateInstance(type) as INetFwOpenPort; port.Name = title; port.Port = portNo; port.Scope = scope; port.Protocol = protocol; //port.IpVersion = ipVersion; try { manager.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(port); } catch (Exception) { return false; } return true; }
private static void GloballyOpenPort(string title, int portNo, NET_FW_SCOPE_ scope, NET_FW_IP_PROTOCOL_ protocol, NET_FW_IP_VERSION_ ipVersion) { Type type = Type.GetTypeFromProgID(PROGID_OPEN_PORT); INetFwOpenPort port = Activator.CreateInstance(type) as INetFwOpenPort; if (port != null) { port.Name = title; port.Port = portNo; port.Scope = scope; port.Protocol = protocol; port.IpVersion = ipVersion; } INetFwMgr manager = GetFirewallManager(); try { manager.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(port); } catch { return; } }
public FW_ERROR_CODE RemovePort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol) { if (m_FirewallProfile == null) { return(FW_ERROR_CODE.FW_ERR_INITIALIZED); } bool bEnablePort = false; FW_ERROR_CODE nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FW_ERROR_CODE.FW_NOERROR) { return(nError); } // Only remove the port, if it is on the collection if (bEnablePort) { // Retrieve the collection of globally open ports INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) { return(FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS); } try { FWOpenPorts.Remove(nPortNumber, ipProtocol); } catch { return(FW_ERROR_CODE.FW_ERR_REMOVE_FROM_COLLECTION); } } return(FW_ERROR_CODE.FW_NOERROR); }
internal static bool AuthorizeApplication(string title, string applicationPath, NET_FW_SCOPE_ scope/*, NET_FW_IP_VERSION_ ipVersion*/, int port, NET_FW_IP_PROTOCOL_ protocol) { // Create the type from prog id Type type = Type.GetTypeFromProgID(PROGID_AUTHORIZED_APPLICATION); INetFwAuthorizedApplication auth = Activator.CreateInstance(type) as INetFwAuthorizedApplication; auth.Name = title; auth.ProcessImageFileName = applicationPath; auth.Scope = scope; //auth.IpVersion = ipVersion; // Not implemented auth.Enabled = true; INetFwMgr manager = GetFirewallManager(); try { manager.LocalPolicy.CurrentProfile.AuthorizedApplications.Add(auth); } catch (Exception) { return false; } return GloballyOpenPort(title, port, scope, protocol, manager); }
public static void AddPortExceptionToSP2Firewall(string name, int port, NET_FW_IP_PROTOCOL_ protocol) { // Instantiating the HNetCfg.NetFwMgr object to get "LocalPolicy" and then "CurrentProfile" INetFwMgr fwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromCLSID(new Guid(INetFwMgrGuid)), true); INetFwPolicy fwPolicy = fwMgr.LocalPolicy; INetFwProfile fwProfile = fwPolicy.CurrentProfile; INetFwOpenPort fwOpenPort = (INetFwOpenPort)Activator.CreateInstance( Type.GetTypeFromCLSID(new Guid(INetFwOpenPortGuid)), true); fwOpenPort.Name = name; fwOpenPort.Port = port; fwOpenPort.Protocol = protocol; fwOpenPort.Enabled = true; fwProfile.GloballyOpenPorts.Add(fwOpenPort); }
/// <summary> /// Add a ports/protocol exception rule for all profiles for Vista or later firewall /// </summary> /// <param name="ruleName"></param> /// <param name="appPath"></param> /// <returns>false if the firewall type isn't available, true for successful completion.</returns> public static bool AddPortExceptionToVistaFirewall(string ruleName, string ports, NET_FW_IP_PROTOCOL_ protocol) { Type fwPolicy2Type = Type.GetTypeFromProgID("HNetCfg.FwPolicy2"); if (fwPolicy2Type == null) { return false; } INetFwPolicy2 fwPolicy2 = (INetFwPolicy2)System.Activator.CreateInstance(fwPolicy2Type); INetFwRule fwRule = (INetFwRule)System.Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwRule")); fwRule.Name = ruleName; fwRule.Protocol = (int)protocol; fwRule.LocalPorts = ports; fwRule.Enabled = true; fwPolicy2.Rules.Add(fwRule); return true; }
public FW_ERROR_CODE AddPort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, string strRegisterName) { if (m_FirewallProfile == null) return FW_ERROR_CODE.FW_ERR_INITIALIZED; bool bEnablePort = true; FW_ERROR_CODE nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FW_ERROR_CODE.FW_NOERROR) return nError; // Only add the port, if it isn't added to the collection if (bEnablePort == false) { // Retrieve the collection of globally open ports INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) return FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS; // Create an instance of an open port Type typeFwPort = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); var FWOpenPort = (INetFwOpenPort) Activator.CreateInstance(typeFwPort); if (FWOpenPort == null) return FW_ERROR_CODE.FW_ERR_CREATE_PORT_INSTANCE; // Set the port number FWOpenPort.Port = nPortNumber; // Set the IP Protocol FWOpenPort.Protocol = ipProtocol; // Set the registered name FWOpenPort.Name = strRegisterName; try { FWOpenPorts.Add(FWOpenPort); } catch { return FW_ERROR_CODE.FW_ERR_ADD_TO_COLLECTION; } } else return FW_ERROR_CODE.FW_ERR_SAME_PORT_EXIST; return FW_ERROR_CODE.FW_NOERROR; }
public static void RemovePortExceptionFromSP2Firewall(int port, NET_FW_IP_PROTOCOL_ protocol) { // Instantiating the HNetCfg.NetFwMgr object to get "LocalPolicy" and then "CurrentProfile" INetFwMgr fwMgr = (INetFwMgr) Activator.CreateInstance(Type.GetTypeFromCLSID(new Guid(INetFwMgrGuid)), true); INetFwPolicy fwPolicy = fwMgr.LocalPolicy; INetFwProfile fwProfile = fwPolicy.CurrentProfile; // Remove application from exception rule list fwProfile.GloballyOpenPorts.Remove(port, protocol); }
public FW_ERROR_CODE IsPortEnabled(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, ref bool bEnable) { if (m_FirewallProfile == null) return FW_ERROR_CODE.FW_ERR_INITIALIZED; // Retrieve the open ports collection INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) return FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS; // Get the open port try { INetFwOpenPort FWOpenPort = FWOpenPorts.Item(nPortNumber, ipProtocol); if (FWOpenPort != null) bEnable = FWOpenPort.Enabled; else bEnable = false; } catch (FileNotFoundException) { bEnable = false; } return FW_ERROR_CODE.FW_NOERROR; }
public FW_ERROR_CODE RemovePort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol) { if (m_FirewallProfile == null) return FW_ERROR_CODE.FW_ERR_INITIALIZED; bool bEnablePort = false; FW_ERROR_CODE nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FW_ERROR_CODE.FW_NOERROR) return nError; // Only remove the port, if it is on the collection if (bEnablePort) { // Retrieve the collection of globally open ports INetFwOpenPorts FWOpenPorts = m_FirewallProfile.GloballyOpenPorts; if (FWOpenPorts == null) return FW_ERROR_CODE.FW_ERR_GLOBAL_OPEN_PORTS; try { FWOpenPorts.Remove(nPortNumber, ipProtocol); } catch { return FW_ERROR_CODE.FW_ERR_REMOVE_FROM_COLLECTION; } } return FW_ERROR_CODE.FW_NOERROR; }
private INetFwOpenPort GetPortObj(string portNumber, NET_FW_IP_PROTOCOL_ ipProtocol) { Type tpResult = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); INetFwOpenPort port = (INetFwOpenPort)Activator.CreateInstance(tpResult); port.Port = Int32.Parse(portNumber); // port number port.Name = appName; // name of the application using the port port.Enabled = true; // enable the port port.Protocol = ipProtocol; return port; }
public bool GloballyOpenPort(string title, int portNo, NET_FW_SCOPE_ scope, NET_FW_IP_PROTOCOL_ protocol, NET_FW_IP_VERSION_ ipVersion) { Type type = Type.GetTypeFromProgID(PROGID_OPEN_PORT); INetFwOpenPort port = Activator.CreateInstance(type) as INetFwOpenPort; port.Name = title; port.Port = portNo; port.Scope = scope; port.Protocol = protocol; port.IpVersion = ipVersion; //INetFwMgr manager = GetFirewallManagerCached(); try { m_NetFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(port); } catch (Exception ex) { throw ex; } return true; }
// example: RemovePort(Int32.Parse(port.Text), NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP); public static bool RemovePort(int port, NET_FW_IP_PROTOCOL_ protocol) { // Remove the port to the ICF Permissions List INetFwMgr mgr = null; try { mgr = (NetFwTypeLib.INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); } catch { // XPSP2 not installed return false; } try { INetFwProfile profile; // Get the current profile profile = mgr.LocalPolicy.CurrentProfile; // Remove the port to the ICF Permissions List profile.GloballyOpenPorts.Remove(port, protocol); return true; } catch { // Log the error or prompt the user return false; } }
/// /// Create authorization rule for a specific port /// /// To view app permissions from command line use: /// "netsh advfirewall firewall show rule name=udptool.vshost.exe" /// public void GrantPortAuthorization(string applicationFullPath, string usedPort, NET_FW_IP_PROTOCOL_ protocol) { ValidateFields(applicationFullPath); if (usedPort == null) throw new ArgumentNullException("usedPort"); if (!IsFirewallInstalled) throw new FirewallHelperException("Cannot grant authorization, firewall is not enabled."); if (!AppAuthorizationsAllowed) throw new FirewallHelperException("Application exceptions are not allowed."); // Other properties like Protocol, IP Version can also be set accordingly // Now add this to the GloballyOpenPorts collection INetFwProfile profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_CURRENT); profile.GloballyOpenPorts.Add(GetPortObj(usedPort, protocol)); profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_STANDARD); profile.GloballyOpenPorts.Add(GetPortObj(usedPort, protocol)); profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_DOMAIN); profile.GloballyOpenPorts.Add(GetPortObj(usedPort, protocol)); }
public FwErrorCode AddPort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, string strRegisterName) { if (_mFirewallProfile == null) return FwErrorCode.FwErrInitialized; bool bEnablePort = true; FwErrorCode nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FwErrorCode.FwNoerror) return nError; // Only add the port, if it isn't added to the collection if (bEnablePort == false) { // Retrieve the collection of globally open ports INetFwOpenPorts fwOpenPorts = _mFirewallProfile.GloballyOpenPorts; if (fwOpenPorts == null) return FwErrorCode.FwErrGlobalOpenPorts; // Create an instance of an open port Type typeFwPort = Type.GetTypeFromCLSID(new Guid("{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}")); var fwOpenPort = (INetFwOpenPort)Activator.CreateInstance(typeFwPort); // Set the port number fwOpenPort.Port = nPortNumber; // Set the IP Protocol fwOpenPort.Protocol = ipProtocol; // Set the registered name fwOpenPort.Name = strRegisterName; try { fwOpenPorts.Add(fwOpenPort); } catch { return FwErrorCode.FwErrAddToCollection; } } else return FwErrorCode.FwErrSamePortExist; return FwErrorCode.FwNoerror; }
public FwErrorCode IsPortEnabled(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol, ref bool bEnable) { if (_mFirewallProfile == null) return FwErrorCode.FwErrInitialized; // Retrieve the open ports collection INetFwOpenPorts fwOpenPorts = _mFirewallProfile.GloballyOpenPorts; if (fwOpenPorts == null) return FwErrorCode.FwErrGlobalOpenPorts; // Get the open port try { INetFwOpenPort fwOpenPort = fwOpenPorts.Item(nPortNumber, ipProtocol); bEnable = fwOpenPort != null && fwOpenPort.Enabled; } catch (System.IO.FileNotFoundException) { bEnable = false; } return FwErrorCode.FwNoerror; }
/// /// Remove port authorization rules. /// public void RemovePortAuthorization(string applicationFullPath, string usedPort, NET_FW_IP_PROTOCOL_ protocol) { ValidateFields(applicationFullPath); if (usedPort == null) throw new ArgumentNullException("usedPort"); int port = Int32.Parse(usedPort); INetFwProfile profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_CURRENT); profile.GloballyOpenPorts.Remove(port, protocol); profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_STANDARD); profile.GloballyOpenPorts.Remove(port, protocol); profile = mgr.LocalPolicy.GetProfileByType(NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_DOMAIN); profile.GloballyOpenPorts.Remove(port, protocol); }
public FwErrorCode RemovePort(int nPortNumber, NET_FW_IP_PROTOCOL_ ipProtocol) { if (_mFirewallProfile == null) return FwErrorCode.FwErrInitialized; bool bEnablePort = false; FwErrorCode nError = IsPortEnabled(nPortNumber, ipProtocol, ref bEnablePort); if (nError != FwErrorCode.FwNoerror) return nError; // Only remove the port, if it is on the collection if (bEnablePort) { // Retrieve the collection of globally open ports INetFwOpenPorts fwOpenPorts = _mFirewallProfile.GloballyOpenPorts; if (fwOpenPorts == null) return FwErrorCode.FwErrGlobalOpenPorts; try { fwOpenPorts.Remove(nPortNumber, ipProtocol); } catch { return FwErrorCode.FwErrRemoveFromCollection; } } return FwErrorCode.FwNoerror; }
private void CreateRuleOut(String RuleName, String Desc, NET_FW_IP_PROTOCOL_ Protocol, String RemotePorts, NET_FW_RULE_DIRECTION_ Direction, INetFwPolicy2 fwPolicy2) { Type typeFWRule = Type.GetTypeFromProgID("HNetCfg.FwRule", false); INetFwRule newRule = (INetFwRule)Activator.CreateInstance(typeFWRule); newRule.Name = RuleName; newRule.Description = Desc; newRule.Protocol = (int)Protocol; newRule.RemotePorts = RemotePorts; newRule.RemoteAddresses = txtRemoteAddress.Text.Replace(" ", "").Replace("\r\n", ","); newRule.Direction = Direction; newRule.Enabled = true; newRule.Grouping = "Elasticsearch"; //newRule.Profiles = fwPolicy2.CurrentProfileTypes; newRule.Action = NET_FW_ACTION_.NET_FW_ACTION_ALLOW; fwPolicy2.Rules.Add(newRule); }