2

I am trying to give another PC completely unrestricted access to my machine. They are both on the same subnet. What I am looking for is effectively disabling the firewall entirely for one IP address.

Example

Host: 192.168.1.2

Client: 192.168.1.3 Firewall "off"

World: xxx.xxx.xxx.xxx Firewall "on"

To be specific I am running "Easy"PHP as a testing server for websites and want to access them from other machines on my network. After tinkering I figure the method suggested in my question would be best to make things actually easy.

PS. I have already tried opening all ports both inbound and outbound to that IP with no results. My only current success has been actually turning the whole firewall off.

6
  • 1
    This is essentially superuser.com/questions/231358/… with a range of one IP :)
    – Squeezy
    Jun 26, 2013 at 15:43
  • 1
    @Foo_Chow Follow the answers for this question just select allow instead of block superuser.com/questions/268902/…
    – Ramhound
    Jun 26, 2013 at 15:43
  • @Squeezy not even close to a dupe. That is what I tried in the PS. section. Didnt work. Im looking for complete disabling to one IP. Jun 26, 2013 at 15:59
  • 1
    You can not disable it for one IP, however accepting ANYTHING for that IP should not result in the firewall blocking traffic anymore. Please show the configuration you attempted.
    – Squeezy
    Jun 26, 2013 at 16:02
  • 2
    You are configuring the firewall on the host, please set Local IP address to any, and remote IP address to the one you want to give access. The configuration in that screenshot is valid, but useless. You have essentially configured access TO and FROM the same IPs.
    – Squeezy
    Jun 26, 2013 at 16:15

1 Answer 1

6

At host 192.168.1.2 (Windows 7)

incoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Incoming" dir=in action=allow protocol=ANY remoteip=192.168.1.3

outcoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Outcoming" dir=out action=allow protocol=ANY remoteip=192.168.1.3

logging firewall dropped packets:

netsh firewall set logging droppedpackets = ENABLE

Install telnet client and check remote application:

telnet 192.168.1.3 <service port>

Check whether the current user is an administrator in the domain:

dsquery * -filter "(&(objectCategory=person)(objectClass=user)(name=%username%)(adminCount=1))" -attr name

Check whether the current user is an administrator on the local machine:

wmic NETLOGIN  Where (Caption="%username%" AND Privileges=2) get Caption, Name, NumberOfLogons, PrimaryGroupId, BadPasswordCount
5
  • +1 for netsh. Also I love the term "outcoming" :D Please mention this needs to be done from with privileges.
    – Squeezy
    Jun 26, 2013 at 16:18
  • Honestly I have no clue why this doesnt work for me. It clearly should, but I guess EasyPHP is messing with something... Not easy in the slightest Jun 26, 2013 at 16:32
  • Ping works though. So at least the communication barrier is down Jun 26, 2013 at 16:35
  • @Foo_Chow, unless the IPs are wrong for your environment it definitely should. You can try logging drops as specified in technet.microsoft.com/de-de/library/cc947815(v=ws.10).aspx to see why your traffic is dropped. Maybe that will show you what is happening.
    – Squeezy
    Jun 26, 2013 at 16:36
  • @Foo_Chow what say telnet 192.168.1.3 <service port> ?
    – STTR
    Jun 26, 2013 at 16:57

Not the answer you're looking for? Browse other questions tagged .