Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


Sign in to follow this  
PROBLEMCHYLD

Windows IPSec Firewall Rules

Recommended Posts

Lately I've been playing with Windows IPSec Firewall and I like it a lot. I try to avoid installing a bunch of unnecessary bloat. I gathered a bunch of rules from the internet and made it close to my iptables ruleset from Linux as possible. Seems to work pretty good except for a few caveats:

1. Can't get Kerberos to go in stealth mode

2. You have to manually add the ip range

3. Some rules have to be force from the cmd line or bat file.

Other than that, its my new Firewall for WinXP.

Edited by PROBLEMCHYLD

Share this post


Link to post
Share on other sites

Do you mind sharing your rules?

Share this post


Link to post
Share on other sites
On 10/25/2018 at 11:06 PM, Dibya said:

Do you mind sharing your rules?

I'm still testing but will share soon. I'm trying to automate the task.

Can someone put all this in a batch script please?

Quote

1. Command - IPSECCMD.EXE export local FIREWALL.IPSEC.OLD

2. Command -

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local]

3. Command - IPSECCMD.EXE -w REG -p "Firewall" -r

4. Create shortcut from IP Security Policies on Local Computer snap-in with the name FIREWALL.MSC.

 

Edited by PROBLEMCHYLD
  • Like 1

Share this post


Link to post
Share on other sites

Finally got most of it figured out. I gonna check out Microsoft Network Monitor and see how robust the logging is. Got FTP working as well....

IPSEC.JPG

Share this post


Link to post
Share on other sites

I am very interested to this project.

Share this post


Link to post
Share on other sites

Like I said, I'm trying to automate the task at hand. I need a batch file that will create a Firewall directory in C:\Program Files and run the necessary commands and disable Windows Firewall in Security Center.

Share this post


Link to post
Share on other sites
9 hours ago, PROBLEMCHYLD said:

Like I said, I'm trying to automate the task at hand. I need a batch file that will create a Firewall directory in C:\Program Files and run the necessary commands and disable Windows Firewall in Security Center.

Thanks.

Share this post


Link to post
Share on other sites
32 minutes ago, sal here said:

Any updates here?

Yeah, I'm using it as we speak. :P I'll release what I have and maybe someone can improve on it.

Share this post


Link to post
Share on other sites

1. Disable Windows Firewall and Security Center.
2. Create a folder in C:\Program Files\Firewall.
3. Run MMC from run-box in the Start Menu. Create a Snap-in from Microsoft Console Root with IP Security Monitor + IP Security Polices on Local Computer.
4. Name Snap-in IPSECCMD.MSC.
5. Place the Snap-in file C:\Program Files\Firewall and create a shortcut from it. Name it Windows Firewall.
6. Extract or copy FIREWALL.CAB contents to C:\Program Files\Firewall.
7. Edit IPSECCMD.BAT to your likes, then run it.
8. Run Windows Firewall shortcut and click IP Security Polices on Local Computer. Right-click to Assign the Policies. (Activate/Turn on).
9. Use IPSECCMD.HTA to monitor your network. Credit goes to http://www.ericphelps.com/scripting/samples/Netstat/index.html

Edited by PROBLEMCHYLD
  • Like 1

Share this post


Link to post
Share on other sites

Does IPsec rules get updated with Linux updates?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...