Windows XP SP2 Firewall

[mrmr]

hello

Someone have some useful script for configure SP2 firewall?

I'm using this firewall.cmd:

cmdow @ /HID
@Echo Off

netsh firewall reset

netsh firewall set notifications enable

netsh firewall del allowedprogram %windir%\system32\sessmgr.exe ALL

netsh firewall set service type=fileandprint mode=enable scope=subnet profile=standard
netsh firewall set service type=remotedesktop mode=disable profile=standard
netsh firewall set service type=upnp mode=disable profile=standard

netsh firewall set icmpsetting 3 enable 
netsh firewall set icmpsetting 8 enable
netsh firewall set icmpsetting 11 enable

netsh firewall set logging %windir%\pfirewall.log
netsh firewall set logging filemaxsize 32767
netsh firewall set logging droppedpackets=enable
netsh firewall set logging connections=enable

btw, something is missing...

For example i can't close port for "remoteadmin".

I've tried this:

netsh firewall set service type=remoteadmin mode=disable profile=standard

but in Firewall GUI the exception remain, so, i've delete the exception completly.

Another problem is for "icmpsetting". These rules work only on AdvancedTab->ICMP,

but i've not menaged how to add rules only in "Network Connection Setting"->"Locall Area Connection"->"Settings..."->"ICMP Tab".

Maybe, i've not catched the difference between the two.

Note that i'm using "Standard Profile", and not "Domain Profile"

Maybe there's the possibility to tweaks this using registry key...I think that should be the right way...

Every comment will be useful.

Thank you

mrmr

[Yzöwl]

Windows Firewall can be preconfigured by modifying the Windows Firewall INF file, named Netfw.inf, in which Windows Firewall’s default configuration is stored. During the installation of Windows XP or update to Windows XP SP2, Windows Firewall imports its configuration from this INF file. This means that any modifications made to the Windows Firewall INF file prior to installation of Windows will automatically be incorporated into the default configuration of Windows Firewall.

Read this for further info! or alternatively read this for further deployment methods.

[mrmr]

i've read all of the above...and searching a bit deeper in microsoft.com, but it seem that neither netfw.inf or shell script can help me...btw...i don't need them at the end...was only for a bit more of knowledge!

thank yo

mrmr