Windows Server 2003 Server Settings IP Security Policy

Common Ports

20 ftp Transfer Ports

21 ftp Control Ports

53 nds Service Ports tcp/utp

80 web service port

161 snmp service port

1433 mssql

3306 mysql

3389 remote connection

#===================== Script Start ====================== Br>

netsh ipsec static add policy name="10 interconnect default ip policy" description="Local can access the Internet, and open the common port."

#===== ================Adding a policy allows two-way ping=============

netsh ipsec static add filter filterlist="All ICMP Communication" srcaddr=me srcmask=255.255.255.255 dstaddr=Any protocol=ICMP

netsh ipsec static add rule name="all ICMP traffic" policy="10 interconnect default ip policy" filterlist="all ICMP traffic" Filteraction="permission"

#========================================================================================= >

netsh ipsec static add filteraction name=Permit action=permit

netsh ipsec static add filteraction name=Block action=block

#===Open some IP unlimited access to any port (UnLimitedIP) ip is 125.76.233.185 can access any port of the server ===

netsh ipsec static add filterlist name=UnLimitedIP description="open some IP unlimited access to any port"

netsh ipsec static add filter filterlist=UnLimitedIP srcaddr=125.76.233.185 dstaddr=Me

netsh ipsec static add rule name=AllowUnLimitedIP policy="10 interconnect default ip policy" filterlist=UnLimitedIP filteraction=Permit

#===Open some ips to access certain ports (SomeIPSomePort Ip is 125.76.233.185 can access port 3389, you can use the other party's 80 and 53 ports

netsh ipsec static add filterlist name=SomeIPSomePort description="open some ip can access certain ports"< Br>

netsh ipsec static add filter filterlist=SomeIPSomePort srcaddr=Me dstaddr=Any dstport=80 protocol=TCP

netsh ipsec static add filter filterlist=SomeIP SomePort srcaddr=Me dstaddr=Any dstport=53 protocol=UDP

netsh ipsec static add filter filterlist=SomeIPSomePort srcaddr=Me dstaddr=Any dstport=53 protocol=TCP

netsh ipsec static add filter Filterlist=SomeIPSomePort srcaddr=125.76.233.185 dstaddr=Me dstport=3389 protocol=TCP

netsh ipsec static add rule name=AllowSomeIPSomePort policy="10 interconnect default ip policy" filterlist=SomeIPSomePort filteraction=Permit

#===Open some ports required by the service (OpenSomePort) All ports can use the website +ftp+ remote service ========================

netsh ipsec static add filterlist name=OpenSomePort description="open some ports required by the service"

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr=Me dstport=20 protocol=TCP

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr=Me dstport=21 protocol=TCP

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr=Me Dstport=80 protocol=TCP

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr=Me dstport=1433 protocol=TCP

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr =Me dstport=3306 protocol=TCP

netsh ipsec static add filter filterlist=OpenSomePort srcaddr=Any dstaddr=Me dstport=3389 protocol=TCP

netsh ipsec static add rule name=AllowOpenSomePort policy= "10 interconnect default ip policy" filterlist=OpenSomePort filteraction=Permit

#===Disallow all accesses (AllAccess)======================

netsh ipsec static add filterlist name=AllAccess

netsh ipsec static add filter filterlist=AllAccess srcaddr=Me dstaddr=Any

netsh ipsec static add rule name=BlockAllAccess policy= "10 interconnect default ip policy" filterlist=AllAccess filteraction=Block

#===Activate this policy=========================

netsh ipsec static set policy name="10 interconnect default ip policy" assign=y