复制Windows防火墙规则(Netsh AdvFirewall防火墙)

Question

我注意到，当我们通过netsh advfirewall firewall创建防火墙规则时，它可以多次运行，创建多个相同的防火墙规则。

在尝试创建新规则之前，有没有检查防火墙规则是否存在的方法？

Answer 1

我设法通过PowerShell的实现了这一点，下面的代码将检查指定的防火墙规则以及指定的本地端口，如果它找到了一个条目，它就不会创建规则。如果它找不到条目，它将创建规则。

$firewallPort = ""
$firewallRuleName = ""

write-host "Checking for '$firewallRuleName' firewall rule on port '$firewallPort' now...."
if ($(Get-NetFirewallRule –DisplayName $firewallRuleName | Get-NetFirewallPortFilter | Where { $_.LocalPort -eq $firewallPort }))
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' already exists, not creating new rule"
}
else
{
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' does not already exist, creating new rule now..."
    New-NetFirewallRule -DisplayName $firewallRuleName -Direction Inbound -Profile Domain,Private,Public -Action Allow -Protocol TCP -LocalPort $firewallPort -RemoteAddress Any
    write-host "Firewall rule for '$firewallRuleName' on port '$firewallPort' created successfully"
}

Answer 2

检查规则"myrule“是否不存在

netsh advfirewall firewall show rule name="myrule" | findstr "no rules"

Answer 3

为了扩展@Oleg的答案，下面是我使用的内容。换掉..。根据你的规则。

set name="my rule"
netsh advfirewall firewall show rule name=!name! >nul
if errorlevel 1 (
    echo Adding firewall rule !name!
    netsh advfirewall firewall add rule name=!name! ...
)