在程式設計控制防火牆前先要有個前提,就是你必須是管理者權限, 這樣本例的程式才能用"Run as administrator"的方式運作,并成功修改. 如果你本身就是用Administrator這個使用者登入的話,直接運作就行了. 建議最好在這個使用者下來調試程式.
本程式隻是個初始的例子,裡面的功能隻開發了一部分,各位有興趣的話可以繼續深入運用. 像Vista的防火牆就比較Bt,除了基本設定外,在"Control Panel\Administrative Tools\Windows Firewall with Advanced Security" 還有進階設定,好像用程式都可控制.
FireWallManager 程式主要功能有
1. public void FireWallTrigger( bool enable ) //開關防火牆. 貌似在Vista裡面有問題,XP sp2好像可以. 但是用INetFwPolicy2.set_FirewallEnabled的方法的話,Vista也能搞定.
2. public void FireWallService( string name, bool enable ) //開關防火牆服務程式,一般裡面的 File and Printer Sharing 服務比較有用.
3. public bool AddPort( string portName, int portNumber, string protocol ) // 開啟一個端口.
4. public bool RemovePort( int portNumber, string protocol ) //删除開啟的端口
5. public bool AddAplication( string discriptionName, string fileName ) //開啟放行應用程式
6. public bool RemoveApplication( string fileName ) // 關閉放行的應用程式.
裡面還有個 protected Object getInstance( String typeName ) 本來是用CLSID來執行個體化那些接口的,後來發現ProgID其實更簡單,不需要查,裡面有個規律,隻需把接口的INet删掉就是ProgID了. 如 INetFwOpenPort port = ( INetFwOpenPort )Activator.CreateInstance( Type.GetTypeFromProgID( "HNetCfg.FwOpenPort" ) ); 中 INetFwOpenPort 與 FwOpenPort.
首先,建立一個Console程式,在程式中添加引用,在COM對象中找到"NetFwTypeLib" ,添加即可. 防火牆主要是靠這個對象操作的. 貌似不止Vista, Xp也是一樣的。核心程式如下:
FireWallManager.cs
using System;
using System.Collections.Generic;
using System.Text;
using NetFwTypeLib;
namespace FirewallManager
{
class FwManager
{
private INetFwMgr NetFwMgr;
private INetFwProfile NetFwProfile;
private INetFwPolicy2 NetFwPolicy2; //this interface contains lots of usefull functions．
public FwManager()
{
//Create Com Object
//Type NetFwMgrType = Type.GetTypeFromCLSID( new Guid( "{304CE942-6E39-40D8-943A-B913C40C9CD4}" ) );
Type NetFwMgrType = Type.GetTypeFromProgID( "HNetCfg.FwMgr" );
object NetFwMgrObject = Activator.CreateInstance( NetFwMgrType );
NetFwMgr = ( INetFwMgr )NetFwMgrObject;
NetFwProfile = NetFwMgr.LocalPolicy.CurrentProfile;
Type NetFwPolicy2Type = Type.GetTypeFromProgID( "HNetCfg.FwPolicy2" );
object NetFwPolicy2Object = System.Activator.CreateInstance( NetFwPolicy2Type );
NetFwPolicy2 = ( INetFwPolicy2 )NetFwPolicy2Object;
}
public void ShowInfo()
{
switch( NetFwProfile.Type )
{
case NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_DOMAIN:
Console.WriteLine( "Network Profile Type1: " + "Domain" );
break;
case NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_STANDARD:
Console.WriteLine( "Network Profile Type1: " + "Standard" );
break;
case NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_CURRENT:
Console.WriteLine( "Network Profile Type1: " + "Current" );
break;
case NET_FW_PROFILE_TYPE_.NET_FW_PROFILE_TYPE_MAX:
Console.WriteLine( "Network Profile Type1: " + "Max" );
break;
}
switch( ( NET_FW_PROFILE_TYPE2_ )NetFwPolicy2.CurrentProfileTypes )
{
case NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_DOMAIN:
Console.WriteLine( "Network Profile Type2: " + "Domain" );
break;
case NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PRIVATE:
Console.WriteLine( "Network Profile Type2: " + "Private" );
break;
case NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PUBLIC:
Console.WriteLine( "Network Profile Type2: " + "Public" );
break;
case NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_ALL:
Console.WriteLine( "Network Profile Type2: " + "All" );
break;
}
Console.WriteLine( "Firewall Enabled: " + NetFwProfile.FirewallEnabled );
Console.WriteLine( "Exceptions Not Allowed: " + NetFwProfile.ExceptionsNotAllowed );
Console.WriteLine( "Notifications Disabled: " + NetFwProfile.NotificationsDisabled );
//Console.WriteLine("UnicastResponsestoMulticastBroadcastDisabled: " + NetFwProfile.UnicastResponsestoMulticastBroadcastDisabled);
//Remote Admin
INetFwRemoteAdminSettings RASettings = NetFwProfile.RemoteAdminSettings;
Console.WriteLine( "Remote Administration Enabled: " + RASettings.Enabled );
switch( RASettings.IpVersion )
{
case NET_FW_IP_VERSION_.NET_FW_IP_VERSION_V4:
Console.WriteLine( "Remote Administration IP Version: V4" );
break;
case NET_FW_IP_VERSION_.NET_FW_IP_VERSION_V6:
Console.WriteLine( "Remote Administration IP Version: V6" );
break;
case NET_FW_IP_VERSION_.NET_FW_IP_VERSION_MAX:
Console.WriteLine( "Remote Administration IP Version: MAX" );
break;
case NET_FW_IP_VERSION_.NET_FW_IP_VERSION_ANY:
Console.WriteLine( "Remote Administration IP Version: ANY" );
break;
}
switch( RASettings.Scope )
{
case NET_FW_SCOPE_.NET_FW_SCOPE_ALL:
Console.WriteLine( "Remote Administration Scope: ALL" );
break;
case NET_FW_SCOPE_.NET_FW_SCOPE_CUSTOM:
Console.WriteLine( "Remote Administration Scope: Custom" );
break;
case NET_FW_SCOPE_.NET_FW_SCOPE_LOCAL_SUBNET:
Console.WriteLine( "Remote Administration Scope: Local Subnet" );
break;
case NET_FW_SCOPE_.NET_FW_SCOPE_MAX:
Console.WriteLine( "Remote Administration Scope: MAX" );
break;
}
// ICMP
INetFwIcmpSettings icmpSettings = NetFwProfile.IcmpSettings;
Console.WriteLine( "ICMP Settings:" );
Console.WriteLine( " AllowOutboundDestinationUnreachable: " + icmpSettings.AllowOutboundDestinationUnreachable );
Console.WriteLine( " AllowOutboundSourceQuench: " + icmpSettings.AllowOutboundSourceQuench );
Console.WriteLine( " AllowRedirect: " + icmpSettings.AllowRedirect );
Console.WriteLine( " AllowInboundEchoRequest: " + icmpSettings.AllowInboundEchoRequest );
Console.WriteLine( " AllowInboundRouterRequest: " + icmpSettings.AllowInboundRouterRequest );
Console.WriteLine( " AllowOutboundTimeExceeded: " + icmpSettings.AllowOutboundTimeExceeded );
Console.WriteLine( " AllowOutboundParameterProblem: " + icmpSettings.AllowOutboundParameterProblem );
Console.WriteLine( " AllowInboundTimestampRequest: " + icmpSettings.AllowInboundTimestampRequest );
Console.WriteLine( " AllowInboundMaskRequest: " + icmpSettings.AllowInboundMaskRequest );
// Gloabal Open ports
foreach( INetFwOpenPort port in NetFwProfile.GloballyOpenPorts )
{
Console.WriteLine( "Open port: " + port.Name + ":" + port.Port + ", " + port.Protocol + " " + port.Enabled );
}
// Services
foreach( INetFwService serv in NetFwProfile.Services )
{
Console.WriteLine( "Service: " + serv.Name + ": " + serv.Enabled );
}
// Autorised Applications
foreach( INetFwAuthorizedApplication app in NetFwProfile.AuthorizedApplications )
{
Console.WriteLine( "AuthorizedApplication: " + app.Name + ": " + app.Enabled );
}
Console.WriteLine();
}
public void FireWallTrigger( bool enable )
{
try
{
NetFwProfile.FirewallEnabled = enable;
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
//try
//{
// NetFwPolicy2.set_FirewallEnabled( NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PRIVATE, enable );
//}
//catch( Exception e )
//{
// Console.WriteLine( e.Message );
//}
Console.WriteLine( "FireWall Enabled: " + NetFwProfile.FirewallEnabled );
}
public bool FireWallState()
{
return NetFwProfile.FirewallEnabled;
}
public void FireWallService( string name, bool enable )
{
try
{
foreach( INetFwService serv in NetFwProfile.Services )
{
if( serv.Name.ToUpper() == name.ToUpper() )
{
serv.Enabled = enable;
Console.WriteLine( "Service: " + serv.Name + ": " + serv.Enabled );
return;
}
}
Console.WriteLine( "The service '{0}' does not exist!", name );
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
}
private NET_FW_IP_PROTOCOL_ GetProtocol( string protocol )
{
NET_FW_IP_PROTOCOL_ prot;
if( protocol.ToUpper() == "TCP" )
prot = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP;
else if( protocol.ToUpper() == "UDP" )
prot = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP;
else
prot = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_ANY;
return prot;
}
public bool AddPort( string portName, int portNumber, string protocol )
{
try
{
INetFwOpenPort port = ( INetFwOpenPort )Activator.CreateInstance(
Type.GetTypeFromProgID( "HNetCfg.FwOpenPort" )
);
port.Name = portName;
port.Port = portNumber;
port.Protocol = GetProtocol( protocol );
port.Enabled = true;
NetFwProfile.GloballyOpenPorts.Add( port );
return true;
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
return false;
}
public bool RemovePort( int portNumber, string protocol )
{
try
{
NetFwProfile.GloballyOpenPorts.Remove( portNumber, GetProtocol( protocol ) );
return true;
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
return false;
}
public bool AddAplication( string discriptionName, string fileName )
{
try
{
INetFwAuthorizedApplication app = ( INetFwAuthorizedApplication )Activator.CreateInstance(
Type.GetTypeFromProgID( "HNetCfg.FwAuthorizedApplication" )
);
app.Name = discriptionName;
app.ProcessImageFileName = fileName;
app.Enabled = true;
NetFwProfile.AuthorizedApplications.Add( app );
return true;
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
return false;
}
public bool RemoveApplication( string fileName )
{
try
{
NetFwProfile.AuthorizedApplications.Remove( fileName );
return true;
}
catch( Exception e )
{
Console.WriteLine( e.Message );
}
return false;
}
protected Object getInstance( String typeName )
{
if( typeName == "INetFwMgr" )
{
Type type = Type.GetTypeFromCLSID( new Guid( "{304CE942-6E39-40D8-943A-B913C40C9CD4}" ) );
return Activator.CreateInstance( type );
}
else if( typeName == "INetAuthApp" )
{
Type type = Type.GetTypeFromCLSID( new Guid( "{EC9846B3-2762-4A6B-A214-6ACB603462D2}" ) );
return Activator.CreateInstance( type );
}
else if( typeName == "INetOpenPort" )
{
Type type = Type.GetTypeFromCLSID( new Guid( "{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}" ) );
return Activator.CreateInstance( type );
}
else
return null;
}
}
}
最後，再給一個更簡單的操作防火牆的方法，其實Vista中用netsh這個指令行程式就可以操作防火牆了。
如
netsh firewall set service all enable 就可以開啟所有服務，很簡單。
netsh firewall add portopening TCP 12345 "Testaddport" 可以開啟一個12345的TCP端口。
還有 netsh advfirewall 等，可以操作更多選項。
參考:
http://danielw.blog.de/2007/01/06/windows_firewall_configuration~1521163
http://www.codeproject.com/useritems/enable_disable_firewall.asp
http://www.codeproject.com/vb/net/WinNetConn.asp
http://www.codeproject.com/useritems/FirewallSetupAction.asp
http://www.codeproject.com/w2k/WinXPSP2Firewall.asp
http://msdn2.microsoft.com/en-us/library/aa365309.aspx
http://www.cnblogs.com/appleseeker/archive/2007/07/10/812907.html