xinjinjie

回复 14# add0kakac


    正在找这个批处理，感谢分享，顺便请教一下，137和138端口为什么是UDP而不是TCP呢?

xinjinjie

回复 21# codegay

结合14楼分享的代码，要添加策略服务的启动，自己添加了一个，不知道对不对，还请大大指点一下

@echo off
sc config PolicyAgent start= auto
for /f "delims=" %%i in ('net start ^| findstr /i /c:"ipsec policy agent"') do (set aa=%%i)
if defined aa (goto :FI) else (net start "ipsec policy agent")
:FI
netsh ipsec static add policy name=deny_bitcoin
netsh ipsec static add filterlist name=fi_deny_bitcoin
netsh ipsec static add filter filterlist=fi_deny_bitcoin srcaddr=any dstaddr=Me dstport=135 protocol=TCP
netsh ipsec static add filter filterlist=fi_deny_bitcoin srcaddr=any dstaddr=Me dstport=137 protocol=UDP
netsh ipsec static add filter filterlist=fi_deny_bitcoin srcaddr=any dstaddr=Me dstport=138 protocol=UDP
netsh ipsec static add filter filterlist=fi_deny_bitcoin srcaddr=any dstaddr=Me dstport=139 protocol=TCP
netsh ipsec static add filter filterlist=fi_deny_bitcoin srcaddr=any dstaddr=Me dstport=445 protocol=TCP
netsh ipsec static add filteraction name=denyact action=block
netsh ipsec static add rule name=deny_bitcoin policy=deny_bitcoin filterlist=fi_deny_bitcoin filteraction=denyact
netsh ipsec static set policy name=deny_bitcoin assign=y
cls
echo 关闭端口成功，3秒后本窗口自动关闭
ping 127.0.0.1 >nul
复制代码