PROBLEMCHYLD Posted October 25, 2018 Share Posted October 25, 2018 (edited) Lately I've been playing with Windows IPSec Firewall and I like it a lot. I try to avoid installing a bunch of unnecessary bloat. I gathered a bunch of rules from the internet and made it close to my iptables ruleset from Linux as possible. Seems to work pretty good except for a few caveats: 1. Can't get Kerberos to go in stealth mode 2. You have to manually add the ip range 3. Some rules have to be force from the cmd line or bat file. Other than that, its my new Firewall for WinXP. Edited October 26, 2018 by PROBLEMCHYLD 1 Link to comment Share on other sites More sharing options...
Dibya Posted October 26, 2018 Share Posted October 26, 2018 Do you mind sharing your rules? Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted October 26, 2018 Author Share Posted October 26, 2018 Windows XP running with and without IPSec Firewall. Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted October 26, 2018 Author Share Posted October 26, 2018 (edited) On 10/25/2018 at 11:06 PM, Dibya said: Do you mind sharing your rules? I'm still testing but will share soon. I'm trying to automate the task. Can someone put all this in a batch script please? Quote 1. Command - IPSECCMD.EXE export local FIREWALL.IPSEC.OLD 2. Command - Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local] 3. Command - IPSECCMD.EXE -w REG -p "Firewall" -r 4. Create shortcut from IP Security Policies on Local Computer snap-in with the name FIREWALL.MSC. Edited October 27, 2018 by PROBLEMCHYLD 1 Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted October 30, 2018 Author Share Posted October 30, 2018 Finally got most of it figured out. I gonna check out Microsoft Network Monitor and see how robust the logging is. Got FTP working as well.... Link to comment Share on other sites More sharing options...
Dibya Posted November 25, 2018 Share Posted November 25, 2018 I am very interested to this project. Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted November 27, 2018 Author Share Posted November 27, 2018 Like I said, I'm trying to automate the task at hand. I need a batch file that will create a Firewall directory in C:\Program Files and run the necessary commands and disable Windows Firewall in Security Center. Link to comment Share on other sites More sharing options...
Dibya Posted November 28, 2018 Share Posted November 28, 2018 9 hours ago, PROBLEMCHYLD said: Like I said, I'm trying to automate the task at hand. I need a batch file that will create a Firewall directory in C:\Program Files and run the necessary commands and disable Windows Firewall in Security Center. Thanks. Link to comment Share on other sites More sharing options...
XPerceniol Posted January 4, 2019 Share Posted January 4, 2019 Any updates here? Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted January 4, 2019 Author Share Posted January 4, 2019 32 minutes ago, sal here said: Any updates here? Yeah, I'm using it as we speak. I'll release what I have and maybe someone can improve on it. Link to comment Share on other sites More sharing options...
XPerceniol Posted January 4, 2019 Share Posted January 4, 2019 Awesome! Thanks for the quick response! Link to comment Share on other sites More sharing options...
Destro Posted January 4, 2019 Share Posted January 4, 2019 looks great especially for laptops. Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted January 4, 2019 Author Share Posted January 4, 2019 (edited) 1. Disable Windows Firewall and Security Center. 2. Create a folder in C:\Program Files\Firewall. 3. Run MMC from run-box in the Start Menu. Create a Snap-in from Microsoft Console Root with IP Security Monitor + IP Security Polices on Local Computer. 4. Name Snap-in IPSECCMD.MSC. 5. Place the Snap-in file C:\Program Files\Firewall and create a shortcut from it. Name it Windows Firewall. 6. Extract or copy FIREWALL.CAB contents to C:\Program Files\Firewall. 7. Edit IPSECCMD.BAT to your likes, then run it. 8. Run Windows Firewall shortcut and click IP Security Polices on Local Computer. Right-click to Assign the Policies. (Activate/Turn on). 9. Use IPSECCMD.HTA to monitor your network. Credit goes to http://www.ericphelps.com/scripting/samples/Netstat/index.html Edited October 1, 2019 by PROBLEMCHYLD 1 Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted September 23, 2019 Author Share Posted September 23, 2019 Anyone know how to convert the rule set to Win 7? Link to comment Share on other sites More sharing options...
Dibya Posted September 28, 2019 Share Posted September 28, 2019 Does IPsec rules get updated with Linux updates? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now