命令行下配置windows xp防火墙（Configure Windows XP firewall under command line）

1、命令行下配置windows xp防火墙（Configure Windows XP firewall under command line）Configure Windows XP firewall under command lineCommand: Netsh firewallParameter:Displays a list of commands / /?Add / / add firewall configurationDelete / / delete firewall configurationDump / / display a configuration scriptHelp

2、displays a list of commandsReset / firewall configuration will reset to the default values.Set / firewall configurationShow / / display firewall configurationAdd allowedprogram / / add allowedprogram.Add portopening / / add portopeningDelete allowedprogram / / delete allowedprogramDelete portopening

3、 / / delete portopeningSet allowedprogram / / set allowedprogramSet icmpsetting / / ICMP firewall configurationSet logging / / set up a firewall configuration recordSet multicastbroadcastresponse / / set multicastbroadcastresponseSet notifications / firewall configuration noticeSet opmode / firewall

4、 configurationSet portopening / / set portopeningSet service / firewall service configurationShow allowedprogram / / show allowedprogramShow config / / display firewall configuration.Show currentprofile / / show currentprofileShow icmpsetting / / ICMP display firewall configurationShow logging / / d

5、isplay firewall configuration recordShow multicastbroadcastresponse / / show multicastbroadcastresponseShow notifications / / display firewall configurationShow opmode / / show portopeningShow portopening / / show portopeningShow service / / display firewall service configurationShow state / / displ

6、ay the current firewall statusSuch as:Command: Netsh firewall show allowedprogram / / view firewall release proceduresNetsh firewall set portopening TCP 445 ENABLE / / 445 port openNetsh firewall set portopening TCP ENABLE / / 3389 needless to say, the release of terminal.Netsh firewall delete allow

7、edprogram C:A.exe A.exe / / delete release procedureNetsh firewall set allowedprogram C:A.exe A ENABLE / / add program under the C drive and release A.exeNetsh firewall add allowedprogram C:A.exe A ENABLE / / add program under the C drive and release A.exe设置防火墙允许的程序配置和添加防火墙允许的程序配置效果一样都可以添加放行程序，C： a.

8、exe是程序路径一是在防火墙里显示的程序名字，这个名字可以随便写，别有用心的家伙可以用个迷惑性的名字呵呵其他命令自己试试吧. . .要是终端登陆做了IP限制的可以用防火墙设置防火墙端口配置TCP 3389远程桌面启用自定义 double byte value, enter the name MTU, press enter. With the mouse double-click MTU, pop-up modify window, fill in the appropriate MTU value. Please write the radix to decimal befor

9、e you fill in. After setting up, you need to restart the machine to take effect.Instance modificationWe used Windows XP operating system, the system default value of MTU is 1500, which is a standard Ethernet setting is not suitable for broadband networks, broadband and general ADSL MTU between 1450

10、and 1492, between the system and the ISP MTU will lead to inconsistent data in the network transmission process for subcontracting, packet transmission time, a waste of valuable, but also seriously affected the efficiency of broadband. This requires that we have to set the native MTU value to the sa

11、me value as the ISP used by MTU before we can quickly browse the web and download the data. However, the use of each area of the ISP MTU values are not the same, ISP also will not regularly change the MTU size, this gives us set the machine MTU has brought great inconvenience, so how can we know wha

12、t ISP MTU is? In fact, we usually use the most common Ping command can easily help us test the size of the local MTU ISP, if you are interested, please follow the essayist to take a look at it.In a wide area network, packet size exceeds the requirement of ISP will not be able to transfer, and the op

13、erating system will be based on the machine will automatically size MTU value does not meet the requirements of data processing and packet transmission, so we can send to Internet on a host of a fixed length data packet, and the operation is not allowed the size of the system changes way to check th

14、e data packet can be transmitted normally, if the packet is less than or equal to ISP MTU value, the transmission can be carried out normally, and if the data packet sent over ISP using the MTU value, the transmission will fail, so we can constantly sending packets of different sizes eventually ISP

15、end MTU the size of the final MTU, and this data plus 28 bytes of information we need is the value of Baotou.testing procedure1. access the Internet and open the start menu2. input command ping - L 14xx - F , here we explain the meaning of command parameters* - L 14xx parameter: Send a fixed length

16、packet, and 14xx is the package size to be tested. As mentioned earlier, the ADSL of MTU is typically between 1450 and 1492, and the value is replaced at each time in the third step* - f parameter: notifies the operating system that the packet size cannot be changed without permission* : host on any

17、 Internet or other host name or IP address3. observe the feedback result and judge the MTU value of ISP1) send the test package for the first time with a packet length of 1450Assuming that the prompt packet is too large, it needs to be subcontracted, so it should reduce the packet size by determinin

18、g that the value (1450) is greater than ISP of MTU2) send the test package second times,Packet length 1440Suppose the packet size drops to 1440, indicating that the packet is too large, so that the value (1440) is still greater than ISP of MTU, and should continue to decrease3) send test package thi

19、rd times, packet length 1430Suppose the packet size drops to 1430, indicating that the packet can be transmitted normally, so that the MTU value of the ISP is judged to be between 144014304) send test package fourth times, packet length 1435Assuming that the packet size is raised to 1435, the prompt

20、 can still be transmitted normally, so the MTU value is judged to be between 144014355) send test package fifth times, packet length 1438Assuming that the packet size is raised to 1438, the prompt can be transmitted normally, so that the MTU value is judged between 144014386) send packets sixth time

21、s, packet length 1439Suppose the packet size is raised to 1439, indicating that the packet is too large to transmit. Therefore, the MTU value of the ISP is determined to be 14384. calculate the MTU value of the local computerThe MTU values above can not be used directly on the local settings, and should be added to the 28 (Baotou size) on this basis, so the final MTU value is 14665. modify the native MTU valueModifying the default MTU values of this machine can be done through th