Windows XP Pro - Internet Connection Firewall

[Alan]

Hi,

I would like to know if I can import policies into the Windows XP Pro -
Internet Connection Firewall short of configuring it from the GUI interface?

What I would to do is something like this:

NetBIOS-203.111.22.44 port 135 allow
NetBIOS-203.111.22.45 port 135 allow
NetBIOS-203.111.22.45 port 135 allow

I have 14 servers that I want to permit port 135 to connect to but it's very
troublesome to configure our 100+ PCs one at a time clicking and clicking.

Thanks

 

[noone]

there is a config file/registry-area for it, but I can't remember how to
get at it. It was mentioned in the "Windows XP Inside Out" book I think.
The Resource Kit book should talk about it too. I'll check my library and
get back...

Best bet - get Zone Alarm Pro.

 

[noone]

found it: go here:

http://www.ispq.com/Support/XPICF.html

 

[Bruce Chambers]

Greetings --

The built-in firewall is not designed to be used on internal LAN
connections. The only connection on which you should have ICF enabled
is the connection to the Internet.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[noone]

I would like to know if I can import policies into the Windows XP Pro -
Internet Connection Firewall short of configuring it from the GUI interface?
I have 14 servers that I want to permit port 135 to connect to but it's very
troublesome to configure our 100+ PCs one at a time clicking and clicking.

ok, got that, NOT thru the GUI.

try this: mod one machine via the gui, then scan the registry to find the
entry that was just made (give the protocol name something distintive like
"zxzxzx", then search for that; it should be in HKLM). once you've found
the reg line(s)/section, you can export it, edit it to clean things up,
then easily use that text file and a script (.bat or .wsh) to update each
machine (pass the file as an input to regedit; check help and support for
the exact syntax of the regedit command line).

 

[Alan]

Thanks to all who have tried to help.

I've already tried to do that, even named it something unique so that I
could not miss it when I search the registry. Somehow it's either not
stored in the registry or it's encrypted.

I've considered products like Zone Alarm but it would add overhead for a
simple filter requirement.

Rgs