Waxaa laga yaabaa inuu yimaado waqti aad u baahan tahay inaad qorto qoraal ama aad meel fog ku xirto PC oo aad maamusho amar si aad awood ugu yeelato ama u gabto dab- damiska Windows . Inta badan agagaaraha IT-ga, adeegsiga Siyaasadda Kooxda^{(Group Policy)} ayaa ah habka ugu fudud ee lagu habeyn karo Windows Firewall kombayutarada^{(Windows Firewall)} macmiilka.

Sidoo kale waa habka ugu fudud ee lagu dari karo ka reebanaanshaha dekedaha adeegyada sida HTTP , wadaaga faylka, codsiyada software, iyo in ka badan. Si kastaba ha ahaatee, waxa kale oo wanaagsan in la ogaado sida loo habeeyo Firewall-ka Windows^{(Windows Firewall)} -ka laga bilaabo amarka isla markiiba haddii aad haysato kombuyuutar iyo adeegayaal aan ku jirin Hagaha Active^{(Active Directory)} .

Maamul Windows Firewall ka amar degdeg ah^{(Command Prompt)}

Marka hore, si aad u aragto in Windows Firewall uu ku shaqaynayo server ama kumbuyuutar, ku qor amarkan isla markiiba:

netsh advfirewall show allprofiles

Hubi^(Make) inaad furto amarka maamulaha (guji Start , ku qor CMD ka dibna midig-guji Command Prompt oo dooro Run as Administrator ). Waa inaad heshaa wax la mid ah waxa hoos ku qoran:

Sida caadiga ah, waa inaad halkan ku aragto saddex liis oo kala duwan: Dejinta profile domain , goobaha profile gaarka ah iyo goobaha astaanta guud. Saddexdani waxay u dhigmaan saddexda gobol ee aad ku dhejin karto isku xirka shabakad kasta ee kombiyuutarkaaga. Haddii aad ku xiran tahay shabakadda guriga oo aad dooratay ikhtiyaarka  Shabakadda Guriga , goobaha astaanta ^{(Home Network)}gaarka^(Private) ah ayaa lagu dabaqi doonaa.

Dawladdu waxay ka^(State) dhigan tahay haddii dab-damiska la shido ama la damiyo. Siyaasadda Firewall-^{(Firewall Policy)} ku waxay kuu sheegaysaa siyaasadaha soo gelaya iyo kuwa ka baxaya ee lagu dabaqayo profile kasta.

Si aad u damiso firewallka profile gaar ah, waxaad isticmaali lahayd amarka soo socda:

netsh advfirewall set privateprofile state off

Ikhtiyaarada kale waa profile hadda^{(currentprofile)} , profile^{(publicprofile)} , profile^{(domainprofile)} , iyo dhammaanprofile^{(allprofiles)} . Markaa haddii aad rabtid in aad gabi ahaanba joojiso firewall-ka, waxa aad isticmaali lahayd allprofiles halkii aad ka isticmaali lahayd profile-ka gaarka ah. Si aad mar labaad awood ugu yeelato, xidho^(on) dhamaadka halkii aad damin^(off) lahayd .

Fure Dekadda^(Port) gudaha Firewall adiga oo isticmaalaya Line Command^{(Command Line)}

Hadda maxaa dhacaya haddii aad rabto inaad furto deked ku taal firewall-ka adoo isticmaalaya khadka taliska? Taasina waa sahlan tahay!

Aynu sheegno inaad rabto inaad furto dekedda 3389, taas oo loogu talagalay desktop-ka fog ee Windows . Waxaad si fudud u maamuli lahayd amarkan:

netsh advfirewall firewall add rule name="Open Remote Desktop" protocol=TCP dir=in localport=3389 action=allow

Amarka aad buu u dheer yahay, laakiin waa sahlan tahay in la burburiyo. Waxaad ku darsataa qaanuun, sii magac, dooro borotokoolka ( TCP ama UDP ), dooro jihada ( Gudaha ama dibadda^(Out) ), sii lambarka dekedda oo dooro ficilka ( Oggolow^(Allow) ama Diid^(Deny) ).

Haddii aad maamuli lahayd amarkan, ka dib u bax abka la oggol yahay ee Windows Firewall , waxaad arki doontaa in shayga Desktop-ka fog^{(Remote Desktop)} hadda la hubiyay:

Haddii aad u baahan tahay inaad furto dekedo kala duwan, kaliya isticmaal xariijimo fudud. Tusaale ahaan, halkan waxaan furayaa dekedaha 600o ilaa 7000 ee UDP taraafikada dibadda:

netsh advfirewall firewall add rule name="UDP ports" protocol=UDP dir=out localport=6000-7000 action=allow

Waxaa jira amarro badan oo horumarsan oo aad isticmaali karto si aad u maamusho dhammaan dhinacyada Windows Firewall , markaa iska hubi inaad isticmaasho /?jilayaasha dhamaadka amar kasta si aad u aragto dhammaan xulashooyinka iyo tusaalooyinka.

Enable or Disable Windows Firewall from Command Prompt

There may comе a time when you need tо write a script or remotely connеct to a PC and run a command to enable or disable the Windows firewall. For most IT environments, using Group Policy is the easiest way to cоnfigure the Wіndows Firewall on client computers.

It’s also the easiest way to add port exceptions for services such as HTTP, file sharing, software applications, and more. However, it’s also good to know how to configure the Windows Firewall from the command prompt just in case you have computers and servers that are not in Active Directory.

Manage Windows Firewall from Command Prompt

First, to see whether the Windows Firewall is enabled on a server or computer, type this command at the command prompt:

netsh advfirewall show allprofiles

Make sure you open an administrator command prompt (click on Start, type in CMD and then right-click on Command Prompt and choose Run as Administrator). You should get something similar to what is shown below:

By default, you should see three separate listings here: Domain profile settings, private profile settings and public profile settings. These three correspond to the three states you can place each network connection on your computer into. If you are connected to your home network and you chose the Home Network option, the Private profile settings will be applied.

State means if the firewall is turned on or off. The Firewall Policy tells you what inbound and outbound policies are being applied to each profile.

To disable the firewall for a specific profile, you would use the following command:

netsh advfirewall set privateprofile state off

The other options are currentprofile, publicprofile, domainprofile, and allprofiles. So if you wanted to disable the firewall completely, you would use allprofiles instead of privateprofile. To enable again, just put on at the end instead of off.

Open Port in Firewall using Command Line

Now what if you want to open a port in the firewall using the command line? That’s simple too!

Let’s say you want to open port 3389, which is for remote desktop in Windows. You would simply run this command:

netsh advfirewall firewall add rule name="Open Remote Desktop" protocol=TCP dir=in localport=3389 action=allow

The command is quite long, but it’s fairly easy to break down. You add a rule, give it a name, choose the protocol (TCP or UDP), choose the direction (In or Out), give it the port number and choose the action (Allow or Deny).

If you were to run this command, then go view the allowed apps in Windows Firewall, you would see that the Remote Desktop item is now checked:

If you need to open up a range of ports, just use a simple dash. For example, here I am opening ports 600o to 7000 for UDP outbound traffic:

netsh advfirewall firewall add rule name="UDP ports" protocol=UDP dir=out localport=6000-7000 action=allow

There are many more advanced commands you can use to manage all aspects of the Windows Firewall, so make sure to use the /? characters at the end of any command to see all the options and examples.

Related posts

• Beddel ciwaanka IP-ga iyo server-yada DNS adoo isticmaalaya amarka degdega ah

• Sida loo soo celiyo Diiwaanka iyadoo la isticmaalayo Command Prompt gudaha Windows 11/10

• Sida loo uninstall barnaamijka iyadoo la isticmaalayo Command Prompt in Windows 11/10

• Hubi Windows 10 qaab dhismeedka OS adoo isticmaalaya PowerShell ama Command Prompt

• Samee barta soo celinta nidaamka adoo isticmaalaya Command Prompt ama PowerShell

• Ogow goorta Windows la rakibay. Waa maxay taariikhda la rakibay ee asalka ah?

• Sida loo socodsiiyo barnaamijka Java ee Command Prompt

• Daar ama dami Console Dhaxalka ah ee Talada degdega ah iyo PowerShell gudaha Windows 10

• Soo hel xogta Faylka iyo Lahaanshaha Faylka adigoo isticmaalaya Command Prompt

• Command Prompt cmd.exe wuxuu ku hayaa soo bixida Startup

• Soo hel furaha badeecada Windows adoo isticmaalaya Command Prompt ama PowerShell

• Sida MAR WALBA loo socodsiiyo Command Prompt iyo PowerShell maamule ahaan

• Ka saar fayraska USB Flash Drive adoo isticmaalaya Command Prompt ama Faylka Dufcada

• Amarada waxtarka leh ee lagu maamulo faylalka iyo faylalka iyadoo la isticmaalayo Command Prompt

• Furaha TAB ee si otomaatig ah u dhammaystiran oo aan ku shaqayn Command Prompt

• Sida loo helo liiska dhammaan Darawallada Aaladaha isticmaalaya Command Prompt

• Daar Desktop Fog adoo isticmaalaya Command Prompt ama PowerShell

• Sida loo furo Microsoft Store apps ka Command Prompt

• Qari ama qari qaybta Hard Drive-kaaga adoo isticmaalaya Command Prompt

• Sida loo furo Command Prompt galka gudaha Windows 11/10