服务之：防火墙入站规则设置
开启服务时：1 需要开放对外的端口设置，需要设置防火墙入站规则。2 或则将整个服务程序排除到防火墙之外
在设置入站时有如下
1 编码添加COM操作组件
2 入站信息类
/// <summary> /// 防火墙入站 /// </summary> public class FirewallInbound { public string Name { get; set; } public string Port { get; set; } public string Protocol { get; set; } }
3 入站操作
public class FireWallManger { /// <summary> /// 通过对象防火墙操作 /// </summary> /// <param name="isOpenDomain">域网络防火墙（禁用：false；启用（默认）：true）</param> /// <param name="isOpenPublicState">公共网络防火墙（禁用：false；启用（默认）：true）</param> /// <param name="isOpenStandard">专用网络防火墙（禁用: false；启用（默认）：true）</param> /// <returns></returns> public bool FirewallOperateByObject(bool isOpenDomain = true, bool isOpenPublicState = true, bool isOpenStandard = true) { try { INetFwPolicy2 firewallPolicy = (INetFwPolicy2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwPolicy2")); // 启用<高级安全Windows防火墙> - 专有配置文件的防火墙 firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PRIVATE, isOpenStandard); // 启用<高级安全Windows防火墙> - 公用配置文件的防火墙 firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PUBLIC, isOpenPublicState); // 启用<高级安全Windows防火墙> - 域配置文件的防火墙 firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_DOMAIN, isOpenDomain); } catch (Exception e) { string error = $"防火墙修改出错：{e.Message}"; } return true; } /// <summary> /// 添加防火墙例外端口 /// </summary> /// <param name="firewallInbounds"></param> public void NetFwAddPorts(List<FirewallInbound> firewallInbounds) { //创建firewall管理类的实例 INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); var objPorts = GetNetFwOpenPorts(firewallInbounds); //加入到防火墙的管理策略 IList<INetFwOpenPort> needSetFwOpenPorts = new List<INetFwOpenPort>(); //获取防火墙已入站的协议 var globallyOpenPorts = netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts; foreach (var objPort in objPorts) { bool exist = false; foreach (INetFwOpenPort globallyOpenPort in globallyOpenPorts) { if (objPort.Name.Equals(globallyOpenPort.Name, StringComparison.CurrentCultureIgnoreCase) && objPort.Port == globallyOpenPort.Port) { exist = true; break; } } if (!exist) needSetFwOpenPorts.Add(objPort); } AddRules(needSetFwOpenPorts); } private IList<INetFwOpenPort> GetNetFwOpenPorts(List<FirewallInbound> firewallInbounds) { IList<INetFwOpenPort> objPorts = new List<INetFwOpenPort>(); foreach (var firewallInbound in firewallInbounds) { INetFwOpenPort objPort = (INetFwOpenPort)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwOpenPort")); objPort.Name = firewallInbound.Name; objPort.Port = Int32.Parse(firewallInbound.Port); objPort.Protocol = firewallInbound.Protocol.ToUpper() == "TCP" ? NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP : NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP; objPort.Scope = NET_FW_SCOPE_.NET_FW_SCOPE_ALL; objPort.Enabled = true; objPorts.Add(objPort); } return objPorts; } /// <summary> /// 将指定端口添加到防火墙外 /// </summary> /// <param name="objPorts"></param> private void AddRules(IList<INetFwOpenPort> objPorts) { if (objPorts == null || !objPorts.Any()) return; INetFwPolicy2 firewallPolicy = (INetFwPolicy2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwPolicy2")); foreach (var objPort in objPorts) { INetFwRule2 rule = (INetFwRule2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FWRule")); rule.Protocol = (int)objPort.Protocol; rule.Profiles = (int)(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_ALL); rule.Direction = NET_FW_RULE_DIRECTION_.NET_FW_RULE_DIR_IN; rule.Name = objPort.Name; rule.LocalPorts = objPort.Port.ToString(); rule.Enabled = true; firewallPolicy.Rules.Add(rule); //netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(objPort); } } /// <summary> /// 将应用程序添加到防火墙例外 /// </summary> /// <param name="name">应用程序名称</param> /// <param name="executablePath">应用程序可执行文件全路径</param> public void NetFwAddApps(string name, string executablePath) { //创建firewall管理类的实例 INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); INetFwAuthorizedApplication app = (INetFwAuthorizedApplication)Activator.CreateInstance( Type.GetTypeFromProgID("HNetCfg.FwAuthorizedApplication")); //在例外列表里，程序显示的名称 app.Name = name; //程序的路径及文件名 app.ProcessImageFileName = executablePath; //是否启用该规则 app.Enabled = true; bool exist = false; //加入到防火墙的管理策略 foreach (INetFwAuthorizedApplication mApp in netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications) { if (app == mApp) { exist = true; break; } } if (!exist) netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications.Add(app); } /// <summary> /// 删除防火墙例外端口 /// </summary> /// <param name="port">端口</param> /// <param name="protocol">协议（TCP、UDP）</param> public void NetFwDelApps(int port, string protocol) { INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Remove(port, protocol == "TCP" ? NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP : NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP); } /// <summary> /// 删除防火墙例外中应用程序 /// </summary> /// <param name="executablePath">程序的绝对路径</param> public void NetFwDelApps(string executablePath) { INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr")); netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications.Remove(executablePath); } }
4 入站调用
/// <summary> /// 设置防火墙入站 /// </summary> private void SetFirewallInbound(string[] args) { var fireWallManger = new FireWallManger(); List<FirewallInbound> firewallInbounds = new List<FirewallInbound> { new FirewallInbound() {Name = "测试名字", Port = "45000", Protocol = "Tcp"} }; fireWallManger.NetFwAddPorts(firewallInbounds); }
