IP安全策略配置工具绿色免费版是一款专为网络管理员设计的安全软件,提供简单易用的界面来帮助用户高效地设置和管理IP安全策略,增强网络安全防护。
```batch
@echo off
ipseccmd -w REG -p HFUT_SECU -r Block TCP/135 -f *+0:135:TCP -n BLOCK -x > nul
ipseccmd -w REG -p HFUT_SECU -r Block UDP/135 -f *+0:135:UDP -n BLOCK -x > nul
for %%i in (137, 138, 445) do (
ipseccmd -w REG -p HFUT_SECU -r Block TCP/%%i -f *+0:%%i:TCP -n BLOCK -x > nul
ipseccmd -w REG -p HFUT_SECU -r Block UDP/%%i -f *+0:%%i:UDP -n BLOCK -x > nul
)
for %%j in (139, 445) do (
netsh advfirewall firewall add rule name=Block %%j TCP dir=in action=block protocol=TCP localport=%%j
netsh advfirewall firewall add rule name=Block %%j UDP dir=in action=block protocol=UDP localport=%%j
)
for %%k in (135, 445) do (
reg add HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters /v AutoShareWks /t REG_DWORD /d 0 /f > nul
reg add HKLM\SYSTEM\CurrentControlSet\Services\LanManWorkstation\Parameters /v DisableNetbiosOverTcpip /t REG_DWORD /d 1 /f > nul
)
for %%l in (5900, 3389) do (
netsh advfirewall firewall add rule name=Block %%l TCP dir=in action=block protocol=TCP localport=%%l
)
ipseccmd -w REG -p HFUT_SECU -r Block TCP/1434 -f *+0:1434:TCP -n BLOCK -x > nul
for %%m in (1521, 80) do (
ipseccmd -w REG -p HFUT_SECU -r Block TCP/%%m -f *+0:%%m:TCP -n BLOCK -x > nul
)
ipseccmd -w REG -p HFUT_SECU -r Block UDP/1434 -f *+0:1434:UDP -n BLOCK -x > nul
for %%n in (5900, 80) do (
netsh advfirewall firewall add rule name=Block %%n TCP dir=in action=block protocol=TCP localport=%%n
)
gpupdate > nul
echo.
echo 设置完毕!您的系统可以免受流行蠕虫病毒及典型木马后门的侵扰!
echo 999宝藏网一片叶子提醒您注意升级操作系统和杀毒软件!
echo.
任意键退出!
pause>nul
```