| 加固项 | 规则最小化 |
|---|---|
| 适用平台 | Windows |
| 风险等级 | 中 |
| 基线 | 每条放行有业务归属 |
增删查
增删查
netsh advfirewall firewall add rule name="Allow HTTPS 443" dir=in action=allow protocol=TCP localport=443 remoteip=10.0.0.0/8
netsh advfirewall firewall show rule name="Allow HTTPS 443" verbose
netsh advfirewall firewall delete rule name="Allow HTTPS 443"
netsh advfirewall firewall show rule name=all | findstr /i "Rule Name" | find /c /v ""remoteip 参数是收敛来源的关键：不带 remoteip 的放行默认 Any，等于对全网开放。