XP Firewall ANY INBOUND TCP / UDP PORT to a host from a given subnet

Check out this tutorial here:

http://www.hammer-software.com/articles/mlxpsp2/MetaLAN_xpsp2_GroupPolicy.html

Follow steps 1-8, then skip down to "allowing Port Exceptions"

Hi,

Thanks for the advice sage, but im afraid that doesnt answer the question.  I  need to open all ports and if i were to adopt your methos i would need 65535 lines (1 for each port)

ahhhhhhhhhhhh... so?????????????? Don't like to type ?????? lol

sorry about that... I guess I mis-understood. Will look into it a bit more for you.

Thanks flubbster that would be fantastic.

Basically ive got 1 month to roll out XP Firewall to 1000 clients without AD!  The problem is that we have several management networks that all need to speak to the clients on anyport.  If i dont get this right, it will mean a repeat visit to the local client machines!

So i need to get something down and dirty in place just to tide us over until the new AD envionment is up and running.

I hope to hear from you soon.

Mike

Mike

Have you looked over TCP/IP Filtering ?
 
How to configure TCP/IP Filtering in Windows Server 2003

Thanks for the post dtewartjr:-

I work in local government, as such we have had legislation imposed on us says that we MUST have a firewall product installed.  

There are 3rd party products on the market that would do this ruleset, but we only have a month so the organisation settled on XP Firewall because it is already present.

Are we saying that my question isnt solveable with XP Firewall then?

This article shows you a way to add a port range to the windows firewall
http://www.newagedigital.com/cgi-bin/newagedigital/articles/ms-firewall-ftp.html
 
 
 Also you could just create an exception for the  program or a service, rather than define port numbers. Then, when the program creates its listening socket(s), the firewall dynamically opens whatever ports the program uses, and restricts incoming traffic to that process only.

This may or may not pertain to what you are trying to accomplish
How to configure RPC dynamic port allocation to work with firewalls

Keep 'em coming guys please!

So far, nothing seems to accomplish what i want to achieve.  I am aware that other products on the market will allow this, so im at a loss at to why XP Firewall doesnt.

Mike

XP firewall is very basic. Have you tried either adding an exception for the program or service that you are trying to unblock? Here are some other ways to customize XP's firewall.
http://www.windowsecurity.com/articles/Customizing-Windows-Firewall.html 

The problem is that we dont really know what we have!

Our thought was to put something in place that allowed all traffice from the IT Management VLANs using a local group policy. Once the centralised GP is in place we were then going to tie it down further.

The whole point of this exercise was to avoid having to visit each PC more than once!

Mike

Anyone?