screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235845734.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235845580.jpg" border=0> b.现在可以看到一个增加IP规则的对话框。 规则的名称和说明没有限制,喜欢就好~不过为了方便查看,我们就叫“拦截135端口” 数据包方向:接收或发送(同时阻止通过135端口接收和发送数据)
对方IP地址:任何地址
数据包协议类型:TCP (因为135端口是一种TCP协议端口)
本地端口:从135到135(定义了要拦截的端口只为135端口)
对方端口:从0到0 (端口为0时为对方的任何端口) TCP标志:SYN
当满足上面条件时:拦截 好了,一个IP规则制作完成~确定!
screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235846621.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235846360.jpg" border=0> c.如图:把我们刚刚制作好的规则放到同类规则的最顶端 使用向上箭头直到不能再向上,并选上勾,然后保存(这一步忘记就白辛苦了|||) 其它端口的关闭设置方法类似,如要开放端口,把‘拦截’改为‘通行’就可以了。 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235846371.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235846797.jpg" border=0> 方法2 自定义安全策略 如果我们手头暂时没有防火墙工具的话,那么可以利用Windows服务器自身的IP安全策略功能,来自定义一个拦截135端口的安全策略。
a.打开控制面板,找到管理工具里面的本地安全设置。 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235846112.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235847784.jpg" border=0> b.看到如图的界面,我们选择左边的IP安全策略,在本地机器。 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235847833.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235847738.jpg" border=0> 然后在右边空白处单击右键,选择创建IP安全策略。出现了一个设置向导。点击下一步
screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235847140.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235847472.jpg" border=0> 名称也是看自己喜欢了,我们还是叫拦截135端口~下一步
去掉激活默认响应规则的勾,下一步 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235847876.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235847811.jpg" border=0> 点击完成,我们就创建好了, screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235847436.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235847965.jpg" border=0> 接下来设置我们用这个规则来干什么,我们是拦截135端口所以添加一个IP安全规则,单击添加(不需要向导所以去掉添加向导的勾) screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/UploadFiles/20051111235848884.jpg');}" src="http://www.xfbbs.com/UploadFiles/20051111235848150.jpg" border=0> 在IP筛选器列表中,我们添加一个新的。单击添加... 在这个对话框中名称还是自定义,去掉添加向导的勾,然后单击添加...