Unless you??™re absolutely hardcore and
love playing with the command line, I strongly recommend using the Windows Firewall
with Advanced Security MMC snap-in. However, before you can remotely manage the
Server Core installation??™s firewall using the MMC snap-in, you will have to enable remote
management. To enable remote management of the firewall, enter the following:
Netsh advfirewall set current settings remotemanagement enable
Once remote management is enabled, you can go to another Windows Server 2008
installation and add the Windows Firewall with Advanced Security MMC snap-in and
point it to the server you want to manage. Unfortunately, if only one Windows Server
2008 instance is on your network, you will need to configure the firewall using Netsh.
To view all the profile-specific properties in all profiles, you can run this command:
Netsh advfirewall show allprofiles
In the output, you??™ll see the general properties of your domain, public and private
profiles such as its state (whether it??™s enabled or disabled), the general firewall policy
such as whether it allows outbound connections but prevents inbound connections, and
the name of the log file. If you want to enable a specific profile??”for example, the domain
profile??”you can run this command:
Netsh advfirewall set domainprofile state on
Let??™s say you want a rule to allow inbound TCP connections to port 80.
Pages:
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77