The "-u" parameter in Ipsecpol.exe

[Guest]

I use Ipsecpol.exe, and execute the following command：
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following command：
ipsecpol -u

but system always return such message：
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Bob I]

How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

 

[Guest]

hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

I use Ipsecpol.exe, and execute the following commandï¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandï¼s(
ipsecpol -u

but system always return such messageï¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Bob I]

And if you supply the filters with -f what happens?

hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

:

How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

pippenchai wrote:

I use Ipsecpol.exe, and execute the following commandï¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandï¼s(
ipsecpol -u

but system always return such messageï¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Guest]

If I supply the -f parameter, it add one more filter to policyagent, the
command look like this: ipsecpol -f 10.2.10.64=0:80:TCP -u
thanks, Bob.

And if you supply the filters with -f what happens?

hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

:

How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

pippenchai wrote:


I use Ipsecpol.exe, and execute the following commandï¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandï¼s(
ipsecpol -u

but system always return such messageï¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Bob I]

When you run ipsecpol, are you in the correct subdirectory?

as step 1

"1.Open a command prompt, and then set the working folder to the folder
where you installed Ipsecpol.exe."

If I supply the -f parameter, it add one more filter to policyagent, the
command look like this: ipsecpol -f 10.2.10.64=0:80:TCP -u
thanks, Bob.

:

And if you supply the filters with -f what happens?

scottie wrote:

hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

:



How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

pippenchai wrote:



I use Ipsecpol.exe, and execute the following commandÃf¯Ã,¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandÃf¯Ã,¼s(
ipsecpol -u

but system always return such messageÃf¯Ã,¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Guest]

Sure,
if I'm not in the correct subdirectory, the error message will be "command
not found". I enter the default subdirectory C:\program files\resource kit.

When you run ipsecpol, are you in the correct subdirectory?

as step 1

"1.Open a command prompt, and then set the working folder to the folder
where you installed Ipsecpol.exe."

If I supply the -f parameter, it add one more filter to policyagent, the
command look like this: ipsecpol -f 10.2.10.64=0:80:TCP -u
thanks, Bob.

:

And if you supply the filters with -f what happens?

scottie wrote:


hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

:



How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

pippenchai wrote:



I use Ipsecpol.exe, and execute the following commandÃf¯Ã,¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandÃf¯Ã,¼s(
ipsecpol -u

but system always return such messageÃf¯Ã,¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!

 

[Bob I]

It sounds like the "-u" parameter is not being passed or not recognized.
Does "ipsecpol /?" result in any additional info?

Sure,
if I'm not in the correct subdirectory, the error message will be "command
not found". I enter the default subdirectory C:\program files\resource kit.

:

When you run ipsecpol, are you in the correct subdirectory?

as step 1

"1.Open a command prompt, and then set the working folder to the folder
where you installed Ipsecpol.exe."

scottie wrote:

If I supply the -f parameter, it add one more filter to policyagent, the
command look like this: ipsecpol -f 10.2.10.64=0:80:TCP -u
thanks, Bob.

:



And if you supply the filters with -f what happens?

scottie wrote:



hi Bob

I had read this article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;813878) before, but
my question is " How to use the -u parameter to clean the rules in dynamic
mode", because the readme file of IpsecPol wrote that we can use the -u
parameter to clean all the rule in dynamic mode, and the -f parameter is
unnecessary with -u, -x and -y parameter.
but when I use this command : ipsecpol -u .
the system always return the message : you must supply filters with -f.

It is not a good solution for me, if I have to restart policy agent
everytime to clean all the rules in dynamic mode.
thanks a lot.

:




How to block specific network protocols and ports by using IPSec
http://support.microsoft.com/default.aspx?scid=kb;en-us;813878

Note You may also restart the IPSec Policy Agent service to clear all
dynamically-assigned policies.

pippenchai wrote:




I use Ipsecpol.exe, and execute the following commandÃffÃ,¯Ãf,Ã,¼s(
ipsecpol -f [10.2.10.64=0:80:TCP]
and it successfully block 10.2.10.64 to connect to local web server.

now I want to delete this rule, by the readme file of ipsecpol.exe, I use
the following commandÃffÃ,¯Ãf,Ã,¼s(
ipsecpol -u

but system always return such messageÃffÃ,¯Ãf,Ã,¼s(
you must supply filters with -f

Can any one tell me what I do wrong?
thanks!