windows firewall config settings exportable?

I want to setup a test machine with the firewall tweaked just right and then
export the settings for open ports etc to othermachines? Is this poss?
i'm trying to use filemon to see which files it writes to etc but can't seem
to figure it out.

Or are there script based ways of doing this?

elmurado wrote:

> I want to setup a test machine with the firewall tweaked just right and then
> export the settings for open ports etc to othermachines? Is this poss?
> i'm trying to use filemon to see which files it writes to etc but can't seem
> to figure it out.

There is no support for export/import settings in the Windows XP
Firewall.


> Or are there script based ways of doing this?

You can create a batch file and run netsh.exe commands there to
configure the firewall.

The netsh.exe syntax is documented in WF_XPSP2.doc.

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/d...d-499f73a637d1


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Thanks Torgeir. Is there any way of 'grabbing' those settings? ie do they
exist somewhere in a form which can be captured.
Another question, is there a way of using runas on the firewall or is it
impossible because it is a service?

"Torgeir Bakken (MVP)" wrote:

> elmurado wrote:
>
> > I want to setup a test machine with the firewall tweaked just right and then
> > export the settings for open ports etc to othermachines? Is this poss?
> > i'm trying to use filemon to see which files it writes to etc but can't seem
> > to figure it out.
>
> There is no support for export/import settings in the Windows XP
> Firewall.
>
>
> > Or are there script based ways of doing this?
>
> You can create a batch file and run netsh.exe commands there to
> configure the firewall.
>
> The netsh.exe syntax is documented in WF_XPSP2.doc.
>
> WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
> Windows XP with Service Pack 2" is downloadable from
> http://www.microsoft.com/downloads/d...d-499f73a637d1
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>

elmurado wrote:

> Thanks Torgeir. Is there any way of 'grabbing' those settings?
> ie do they exist somewhere in a form which can be captured.

You can display the settings like this (in a command prompt):

netsh.exe firewall show config

For a more detailed listing:

netsh.exe firewall show config verbose = ENABLE

To a file:
netsh.exe firewall show config verbose = ENABLE >fw_cfg.txt


> Another question, is there a way of using runas on the firewall
> or is it impossible because it is a service?

It might work to run netsh.exe with runas.

For the GUI configuration, this might work with runas:

control.exe firewall.cpl


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx