how to open all tcp/udp ports to a subnet?

I want to know how to config w2k8 firewall so that it open all tcp/udp ports to a subnet?

I played with open a port, but there are just too many ports. so i think that there must be a way
to allow subnet.

Hi,


You can create a firewall rule to allow all ports (TCP/UDP) and specify the IP subnet that this rule matches. Here is an example for your reference:


1. In Windows Firewall with Advanced Settings console, create a New Inbound Rule.

2. In the Rule Type page, select Custom, click Next.

3. In the Program page, select All programs, click Next.

4. In the Protocol and Ports page, select the following options and click Next:

Protocol type: TCP (or UDP)
Local port: All Ports
Remote port: All Ports

5. In the Scope page, click These IP address under Which remote IP addresses does this rule match? section, click Add button, select This IP address range, type the IP address range of the subnet, click OK, and then click Next.

6. In the Action page, select Allow the connection, click Next.

7. Select all profiles, click Next to finish the wizard.


For additional information about Windows Firewall in Windows Server 2008, refer to the following article:


Windows Firewall with Advanced Security and IPsec

Windows Firewall with Advanced Security and IPsec

__________________
A.Rajesh Khanna

Hi,

On windows Server 2008, there are three zones for the firewall. These include domain, private and public. If all the computers on the subnet are on the domain, open up the domain firewall zone fully, but keep the others more secure. This should give you the openness of the server, but keep you protected, that you are looking for.

__________________
Shaalini.S
Be the Best of Whatever you are...

Hi,

Thank you very much for everyone's supporting.

I got it to work manually, but i have yet to make it automatic. Is there a NETSH command line (or other) to
do the configuration automaticlly?

Thanks

Hi,

i am not sure if this work.


netsh advfirewall firewall add rule name="TEST" dir=in action=allow protocal=tcp localport=any program=all remoteip=xxx.xxx.xxx.xxx - xxx.xxx.xxx.xxx

thanks

Hi,

It should work. For more information, please refer to the following article:

How to use the "netsh advfirewall firewall" context instead of the "netsh firewall" context to control Windows Firewall behavior in Windows Server 2008 and in Windows Vista
How to use the "netsh advfirewall firewall" context instead of the "netsh firewall" context to control Windows Firewall behavior in Windows Server 2008 and in Windows Vista

Netsh AdvFirewall Firewall Commands
Netsh AdvFirewall Firewall Commands

Thanks.

__________________
A.Rajesh Khanna