Windows XP Pro - Internet Connection Firewall

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

Hi,

I would like to know if I can import policies into the Windows XP Pro -
Internet Connection Firewall short of configuring it from the GUI interface?

What I would to do is something like this:

NetBIOS-203.111.22.44 port 135 allow
NetBIOS-203.111.22.45 port 135 allow
NetBIOS-203.111.22.45 port 135 allow

I have 14 servers that I want to permit port 135 to connect to but it's very
troublesome to configure our 100+ PCs one at a time clicking and clicking.

Thanks
 
there is a config file/registry-area for it, but I can't remember how to
get at it. It was mentioned in the "Windows XP Inside Out" book I think.
The Resource Kit book should talk about it too. I'll check my library and
get back...

Best bet - get Zone Alarm Pro.
 
Greetings --

The built-in firewall is not designed to be used on internal LAN
connections. The only connection on which you should have ICF enabled
is the connection to the Internet.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Alan said:
I would like to know if I can import policies into the Windows XP Pro -
Internet Connection Firewall short of configuring it from the GUI interface?
I have 14 servers that I want to permit port 135 to connect to but it's very
troublesome to configure our 100+ PCs one at a time clicking and clicking.
Click to expand...

ok, got that, NOT thru the GUI.

try this: mod one machine via the gui, then scan the registry to find the
entry that was just made (give the protocol name something distintive like
"zxzxzx", then search for that; it should be in HKLM). once you've found
the reg line(s)/section, you can export it, edit it to clean things up,
then easily use that text file and a script (.bat or .wsh) to update each
machine (pass the file as an input to regedit; check help and support for
the exact syntax of the regedit command line).
 
Thanks to all who have tried to help.

I've already tried to do that, even named it something unique so that I
could not miss it when I search the registry. Somehow it's either not
stored in the registry or it's encrypted.

I've considered products like Zone Alarm but it would add overhead for a
simple filter requirement.

Rgs
 
Back
Top