Firewall IP range exception windows CE 7

Question

Hello!

I would like to create a rule to allow a port range through firewall in windows CE.
I tried to make an IP rule with IP:10.10.10.1-254 and IP:10.10.10.1-10.10.10.254, but none of them works.
I tried to make a subnet rule: IP:10.10.10.1 IP Mask: 0.0.0.255, but this is not working too.

I want to allow these addresses: 10.10.10.1-10.10.10.254

Is someone know how to do it?

Answer 1

Hello there,

You can use the below powershell script to achieve this.

$port1 = New-Object -ComObject HNetCfg.FWOpenPort

$port1.Port = 80

$port1.Name = 'MyTestPort' # name of Port

$port1.Enabled = $true

$fwMgr = New-Object -ComObject HNetCfg.FwMgr

$profiledomain=$fwMgr.LocalPolicy.GetProfileByType(0)

$profiledomain.GloballyOpenPorts.Add($port1)

To specify a range of port numbers, separate the two numbers with a colon (:), such as -p tcp --dport 3000:3200. The largest acceptable valid range is 0:65535.

Use an exclamation point character (!) after the --dport option to match all packets which do not use that network service or port.

https://learn.microsoft.com/en-US/troubleshoot/windows-server/networking/netsh-advfirewall-firewall-control-firewall-behavior

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--