Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

This question already has an answer here:

I am trying to give another PC completely unrestricted access to my machine. They are both on the same subnet. What I am looking for is effectively disabling the firewall entirely for one IP address.

Example

Host: 192.168.1.2

Client: 192.168.1.3 Firewall "off"

World: xxx.xxx.xxx.xxx Firewall "on"

To be specific I am running "Easy"PHP as a testing server for websites and want to access them from other machines on my network. After tinkering I figure the method suggested in my question would be best to make things actually easy.

PS. I have already tried opening all ports both inbound and outbound to that IP with no results. My only current success has been actually turning the whole firewall off.

share|improve this question

marked as duplicate by Ƭᴇcʜιᴇ007, Scott Chamberlain, gronostaj, soandos, Mokubai Jun 29 '13 at 9:58

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1  
This is essentially superuser.com/questions/231358/… with a range of one IP :) –  Squeezy Jun 26 '13 at 15:43
1  
@Foo_Chow Follow the answers for this question just select allow instead of block superuser.com/questions/268902/… –  Ramhound Jun 26 '13 at 15:43
    
@Squeezy not even close to a dupe. That is what I tried in the PS. section. Didnt work. Im looking for complete disabling to one IP. –  Foo_Chow Jun 26 '13 at 15:59
1  
You can not disable it for one IP, however accepting ANYTHING for that IP should not result in the firewall blocking traffic anymore. Please show the configuration you attempted. –  Squeezy Jun 26 '13 at 16:02
2  
You are configuring the firewall on the host, please set Local IP address to any, and remote IP address to the one you want to give access. The configuration in that screenshot is valid, but useless. You have essentially configured access TO and FROM the same IPs. –  Squeezy Jun 26 '13 at 16:15

1 Answer 1

up vote 3 down vote accepted

At host 192.168.1.2 (Windows 7)

incoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Incoming" dir=in action=allow protocol=ANY remoteip=192.168.1.3

outcoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Outcoming" dir=out action=allow protocol=ANY remoteip=192.168.1.3

logging firewall dropped packets:

netsh firewall set logging droppedpackets = ENABLE

Install telnet client and check remote application:

telnet 192.168.1.3 <service port>

Check whether the current user is an administrator in the domain:

dsquery * -filter "(&(objectCategory=person)(objectClass=user)(name=%username%)(adminCount=1))" -attr name

Check whether the current user is an administrator on the local machine:

wmic NETLOGIN  Where (Caption="%username%" AND Privileges=2) get Caption, Name, NumberOfLogons, PrimaryGroupId, BadPasswordCount
share|improve this answer
    
+1 for netsh. Also I love the term "outcoming" :D Please mention this needs to be done from with privileges. –  Squeezy Jun 26 '13 at 16:18
    
Honestly I have no clue why this doesnt work for me. It clearly should, but I guess EasyPHP is messing with something... Not easy in the slightest –  Foo_Chow Jun 26 '13 at 16:32
    
Ping works though. So at least the communication barrier is down –  Foo_Chow Jun 26 '13 at 16:35
    
@Foo_Chow, unless the IPs are wrong for your environment it definitely should. You can try logging drops as specified in technet.microsoft.com/de-de/library/cc947815(v=ws.10).aspx to see why your traffic is dropped. Maybe that will show you what is happening. –  Squeezy Jun 26 '13 at 16:36
    
@Foo_Chow what say telnet 192.168.1.3 <service port> ? –  STTR Jun 26 '13 at 16:57

Not the answer you're looking for? Browse other questions tagged or ask your own question.