Search results for 'app:weblogs' matching tags 'PowerShell' and 'HNetCfg.FwMgr'

Get-FirewallStatus.ps1

Anonymous — Tue, 23 Mar 2010 05:00:00 GMT

<#
.SYNOPSIS
This script gets the status of the host firewall
and ensures the firewall IS running!
.DESCRIPTION
This script gets the status and displays it to the
console. The script also turns on the firewall if it's
currently off. It's a simpler script than in MSDN for VBScript!
.NOTES
File Name : Get-FirewallStatus.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://www.pshscripts.blogspot.com
MSDN Sample posted at:
http://msdn.microsoft.com/en-us/library/aa366442%28VS.85%29.aspx
.EXAMPLE
PSH [C:\foo]: .\Get-FirewallStatus.ps1
Firewall Enabled : True
Firewall Exceptions Not Allowed: False
#>
##
# Start Script
##
# Create the firewall manager object.
$fwMgr = New-Object -com HNetCfg.FwMgr
# Get the current profile for the local firewall policy.
$profile = $fwMgr.LocalPolicy.CurrentProfile
# Verify that the Firewall is enabled. If it isn't, then enable it.
if (!$profile.FirewallEnabled)
{profile.FirewallEnabled = $TRUE}
# Display details
"Firewall Enabled : {0}" -f $profile.FirewallEnabled
"Firewall Exceptions Not Allowed: {0}" -f $profile.ExceptionsNotAllowed
# End Script

Technorati Tags: PowerShell,PowerShell scripts,HnetCfg.FwMgr

Get-FWAuthorisedApplications.ps1

Anonymous — Mon, 22 Mar 2010 05:00:00 GMT

<#
.SYNOPSIS
This script displays each Firewall Authorised Application
.DESCRIPTION
This script gets the list of authorised applications, then
displays them. This is a re-write of a MSDN Script written in
VBScript.
.NOTES
File Name : Get-FWAuthorisedApplications.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://www.pshscripts.blogspot.com
MSDN Sample posted at:
http://msdn.microsoft.com/en-us/library/aa366181%28VS.85%29.aspx
.EXAMPLE
PSH [C:\foo]: .\Get-FWAuthorisedApplications.ps1
2 Authorised Applications:
Name: : Delivery Manager Service
Image Filename : C:\Program Files (x86)\Kontiki\KService.exe
IP Version : ANY
Scope : All subnets
RemoteAddresses: *
Enabled : True
Name: : BitTorrent
Image Filename : C:\Program Files (x86)\BitTorrent\bittorrent.ex
IP Version : ANY
Scope : All subnets
RemoteAddresses: *
Enabled : True
#>
##
# Start of script
##
# IP Version Constants
$NET_FW_IP_VERSION_V4 = 0
$NET_FW_IP_VERSION_V4_NAME = "IPv4"
$NET_FW_IP_VERSION_V6 = 1
$NET_FW_IP_VERSION_V6_NAME = "IPv6"
$NET_FW_IP_VERSION_ANY = 2
$NET_FW_IP_VERSION_ANY_NAME = "ANY"
# Scope constants
$NET_FW_SCOPE_ALL = 0
$NET_FW_SCOPE_ALL_NAME = "All subnets"
$NET_FW_SCOPE_LOCAL_SUBNET = 1
$NET_FW_SCOPE_LOCAL_SUBNET_NAME = "Local subnet only"
$NET_FW_SCOPE_CUSTOM = 2
$NET_FW_SCOPE_CUSTOM_NAME = "Custom Scope (see RemoteAddresses)"
# Create the firewall manager object
$fwMgr = new-object -com HNetCfg.FwMgr
# Get the current profile for the local firewall policy
$profile = $fwMgr.LocalPolicy.CurrentProfile
#Display authorised applications
"{0} Authorised Applications:" -f $profile.AuthorizedApplications.Count
foreach ($app in $profile.AuthorizedApplications) {
" Name: : {0}" -f $app.Name
" Image Filename : {0}" -f $app.ProcessImageFileName
switch ($app.IpVersion) {
$NET_FW_IP_VERSION_V4 {" IP Version : {0}" -f $NET_FW_IP_VERSION_V4_NAME}
$NET_FW_IP_VERSION_V6 {" IP Version : {0}" -f $NET_FW_IP_VERSION_V6_NAME}
$NET_FW_IP_VERSION_ANY {" IP Version : {0}" -f $NET_FW_IP_VERSION_ANY_NAME}
}
switch ($app.Scope) {
$NET_FW_SCOPE_ALL {" Scope : {0}" -f $NET_FW_SCOPE_ALL_NAME}
$NET_FW_SCOPE_LOCAL_SUBNET {" Scope : {0}" -f $NET_FW_SCOPE_LOCAL_SUBNET_NAME}
$NET_FW_SCOPE_CUSTOM {" Scope : {0}" -f $NET_FW_SCOPE_CUSTOM_NAME}
}
" RemoteAddresses: {0}" -f $app.RemoteAddresses
" Enabled : {0}" -f $app.Enabled
""
}

Technorati Tags: powershell,code,script,scripts,HnetCfg.FwMgr

Add-FireWallApplication.ps1

Anonymous — Sun, 21 Mar 2010 05:00:00 GMT

<#
.SYNOPSIS
This script adds a program to the firewall.
.DESCRIPTION
This script used the firewall com object to add
a new application to the firewall.
.NOTES
File Name : Add-FirewallApplication.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://pshscripts.blogspot.com/2010/03/add-firewallapplicationps1.html
MSDN Sample posted at:
http://msdn.microsoft.com/en-us/library/aa366421%28VS.85%29.aspx
.EXAMPLE
At start of script, authorised applications are:
Name Enabled
---- -------
Delivery Manager Service True
BitTornado True
driver True
driver True
BitTorrent True
DNA True
Microsoft Office OneNote True
After adding Notepad - here are authorised applications
Name Enabled
---- -------
Notepad True
Delivery Manager Service True
BitTornado True
driver True
driver True
BitTorrent True
DNA True
Microsoft Office OneNote True
#>
##
# Start of script
##
# Set constants
$NET_FW_PROFILE_DOMAIN = 0
$NET_FW_PROFILE_STANDARD = 1
# Scope
$NET_FW_SCOPE_ALL = 0
# IP Version - ANY is the only allowable setting for now
$NET_FW_IP_VERSION_ANY = 2
# Create the firewall manager object.
$fwMgr = new-object -com HNetCfg.FwMgr
# Get the current profile for the local firewall policy.
$profile = $fwMgr.LocalPolicy.CurrentProfile
# Display applications available
"At start of script, authorised applications are:"
$profile.AuthorizedApplications | ft name, enabled -AutoSize
# Create application to add to firewall
$app = New-Object -com HNetCfg.FwAuthorizedApplication
$app.ProcessImageFileName = "C:\windows\notepad.exe"
$app.Name = "Notepad"
$app.Scope = $NET_FW_SCOPE_ALL
# Use either Scope or RemoteAddresses, but not both
# $app.RemoteAddresses = "*"
$app.IpVersion = $NET_FW_IP_VERSION_ANY
$app.Enabled = $TRUE
# Use this line if you want to add the app, but disabled.
# $app.Enabled = FALSE
$profile.AuthorizedApplications.Add($app)
# Show applications after addition
"After adding Notepad - here are authorised applications"
$profile.AuthorizedApplications | ft name, enabled -AutoSize
# End of script

Technorati Tags: PowerShell Scripts,scripts,com,HnetCfg.FwMgr,HnetCfg.FWAuthorizedApplication,code

Enable-ICMP.ps1

Anonymous — Thu, 18 Mar 2010 05:00:00 GMT

<#
.SYNOPSIS
This script Enables ICMP on the Standard Firewall profile.
.DESCRIPTION
This script creates a Firewall object then configures it.
.NOTES
File Name : Enable-ICMP.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://www.pshscripts.blogspot.com
MSDN Sample posted at:
http://
.EXAMPLE
PSH [C:\foo]: . 'E:\PowerShellScriptLib\COM\HNetCfg.FwMgr\Enable-ICMP.ps1'
AllowOutboundDestinationUnreachable : False
AllowRedirect : False
AllowInboundEchoRequest : False
AllowOutboundTimeExceeded : False
AllowOutboundParameterProblem : False
AllowOutboundSourceQuench : False
AllowInboundRouterRequest : False
AllowInboundTimestampRequest : False
AllowInboundMaskRequest : False
AllowOutboundPacketTooBig : True
After Script ran:
AllowOutboundDestinationUnreachable : False
AllowRedirect : False
AllowInboundEchoRequest : True
AllowOutboundTimeExceeded : False
AllowOutboundParameterProblem : False
AllowOutboundSourceQuench : False
AllowInboundRouterRequest : False
AllowInboundTimestampRequest : False
AllowInboundMaskRequest : False
AllowOutboundPacketTooBig : True
#>
##
# Start of script
##
# Set strict mode
Set-StrictMode -Version 2.0
# Set Constants
$NET_FW_PROFILE_DOMAIN = 0
$NET_FW_PROFILE_STANDARD = 1
# Create the firewall manager object.
$fwMgr = New-Object -com HNetCfg.FwMgr
# Get the current profile for the local firewall policy.
$profile = $fwMgr.LocalPolicy.GetProfileByType($NET_FW_PROFILE_STANDARD)
# Display current ICMP settings
$Profile.IcmpSettings
# Now set it to True
$profile.IcmpSettings.AllowInboundEchoRequest = $True
# Use this line if you want to disable the setting.
#profile.IcmpSettings.AllowInboundEchoRequest = $FALSE
# Display it again
"After Script ran: "
$Profile.IcmpSettings
# End Script

Technorati Tags: PowerShell,Script,com,HNetCfg.FwMgr

Enable-FirewallPort2.ps1

Anonymous — Wed, 17 Mar 2010 05:00:00 GMT

<#
.SYNOPSIS
This script creates a rule in the Windows Host Firewall.
.DESCRIPTION
This script creates a new firewall rule for
port 80 over tcp (i.e. 80).
.NOTES
File Name : Enable-FirewallPort.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://pshscripts.blogspot.com/2010/03/enable-firewallport2ps1.html
MSDN Sample posted at:
http://msdn.microsoft.com/en-us/library/aa366423%28VS.85%29.aspx
.EXAMPLE
PSH [C:\foo]: .\Enable-FirewallPort.ps1
Before Script Runs:
Name IpVersion Protocol Port Scope RemoteAddresses Enabled
---- --------- -------- ---- ----- --------------- -------
HTTPS 2 6 443 0 * True
driver 2 6 8085 0 * True
driver 2 6 8085 0 * True
After Script Runs:
Name IpVersion Protocol Port Scope RemoteAddresses Enabled
---- --------- -------- ---- ----- --------------- -------
HTTP 2 6 80 0 * True
HTTPS 2 6 443 0 * True
driver 2 6 8085 0 * True
driver 2 6 8085 0 * True
#>
##
# Start Script
##
# Set Strict Mode
Set-Strictmode -Version 2.0
# Set Constants
$NET_FW_IP_PROTOCOL_UDP = 17
$NET_FW_IP_PROTOCOL_TCP = 6
# Create the firewall manager object.
$fwMgr = New-Object -COM HNetCfg.FwMgr
# Get the current profile for the local firewall policy.
$profile = $fwMgr.LocalPolicy.CurrentProfile
# Display it
"Before Script Runs:"
$profile.GloballyOpenPorts | `
ft name, ipversion, protocol, port, scope, remoteaddresses, enabled -auto
# Now add Port 80
$port = New-Object -COM HNetCfg.FWOpenPort
$port.Name = "HTTP"
$port.Protocol = $NET_FW_IP_PROTOCOL_TCP
$port.Port = 80
# If using RemoteAddresses, don't use Scope
# "*" means Scope of Any. Other entries are ignored if this is specified.
# "LocalSubnet" means Scope of Local Subnet. Can be used with other addresses as well.
$port.RemoteAddresses = "*"
# Use this line to scope the port to Local Subnet only
#$port.RemoteAddresses = "LocalSubnet"
#Use this line to scope the port to the specific IP 10.1.1.1, the specific subnet 12.5.0.0, and Local Subnet. Don't put spaces.
#port.RemoteAddresses = "LocalSubnet,10.1.1.1/255.255.255.255,12.5.0.0/255.255.0.0"
$port.Enabled = $TRUE
#Use this line instead if you want to add the port, but disabled
#port.Enabled = FALSE
# Now add the port
$profile.GloballyOpenPorts.Add($port)
# Print Results
" After Script Runs:"
$profile = $fwMgr.LocalPolicy.CurrentProfile
$profile.GloballyOpenPorts | `
ft name, ipversion, protocol, port, scope, remoteaddresses, enabled -auto
# End of script

Technorati Tags: Powershell,script,HNetFcg.fwmgr,Hnetcfg.fwopenport,com

Enable-FWPort.ps1

Anonymous — Fri, 05 Mar 2010 06:00:00 GMT

<#
.SYNOPSIS
This script enables then disables the SMTP port on a local system
.DESCRIPTION
This script first creates a FW object, then creates a port. The
script then addes that port to the firewall rules. The script
finally removes the port. The script also prints before/after
results.
.NOTES
File Name : Enable-FWPort.ps1
Author : Thomas Lee - tfl@psp.co.uk
Requires : PowerShell Version 2.0
.LINK
This script posted to:
http://www.pshscripts.blogspot.com
MSDN Sample posted at:
http://msdn.microsoft.com/en-us/library/aa366425(VS.85).aspx
#>
##
# Start of Script
##
# Define Constants
$NET_FW_IP_PROTOCOL_UDP = 17
$NET_FW_IP_PROTOCOL_TCP = 6
$NET_FW_SCOPE_ALL = 0
# Create FW objecct
$fwMgr = new-object -com HNetCfg.FwMgr
# Get current profile
$profile = $fwMgr.LocalPolicy.CurrentProfile
# Display ports open:
$profile.GloballyOpenPorts | ft name,port,enabled -auto
# Create Port object
$port = New-Object -com HNetCfg.FWOpenPort
$port.Name = "SMTP"
$port.Port = 25
$port.Protocol = $NET_FW_IP_PROTOCOL_TCP
$port.Scope = $NET_FW_SCOPE_ALL
# Enable the port
$port.Enabled = $True
$profile.GloballyOpenPorts.Add($port)
# Display results
$profile.GloballyOpenPorts | ft name,port,enabled -auto
# now remove the port
$profile.GloballyOpenPorts.remove($port.port,$NET_FW_IP_PROTOCOL_TCP)
# Display results
$profile.GloballyOpenPorts | ft name,port,enabled -auto
# End of script

Technorati Tags: COM,PowerShell,Code,hNetCfg.FwMgr