Netsh或Network Shell是一个命令行实用程序，可帮助 IT 管理员在Windows 10上配置和查看各种与网络相关的功能。此实用程序也可用于管理 Windows 防火墙^{(manage Windows Firewall)}，如果您正在寻找一些在命令行上的直接方法，那么它是一个了解和使用的有用实用程序。

使用 Netsh 命令^{(Use Netsh Command)}管理Windows 防火墙^{(Windows Firewall)}

Windows 防火墙^{(Windows Firewall)}配置可深入设置，这使得它无法计数。没有上下文菜单和完成一些事情的一步法。当您需要经常这样做时，这是有益的。您可以将命令保存在BAT文件中，并以管理员权限运行它以快速执行它。

曾经有netsh firewall命令，但已被替换或将被弃用netsh advfirewall.

您获得 advfirewall 的选项列表如下：^{(The list of options you get the advfirewall are as follows:)}

• consec – 更改 *netsh advfirewall consec' 上下文。
• dump – 显示配置脚本。
• export – 将当前策略导出到文件。
• firewall – 更改 *netsh advfirewall 防火墙的上下文。
  • add – 添加^{(– Adds)}新的入站或出站防火墙规则。
  • delete – 删除^{(– Deletes)}所有匹配的防火墙规则。
  • dump – 显示配置脚本。
  • set –^{(– Sets)}为现有规则的属性设置新值。
  • show – 显示指定的防火墙规则。
• help – 显示命令列表。
• import – 将策略文件导入当前策略存储。
• mainmode – 更改 *netsh advfirewall mainmode' 上下文。
• monitor – 更改 *netsh advfirewall monitor 的上下文。
• reset –将策略重置^(Resets)为默认的开箱即用策略。
• set –设置^(Sets)每个配置文件或全局设置。
• show – 显示^{(– Displays)}配置文件或全局属性。

防火墙命令列表（示例）^{(List of Firewall Commands (Examples))}

以下是您可以使用的一些常用命令的列表，例如启用端口、允许程序等。

启用端口^{(Enable a Port)}

netsh advfirewall firewall add rule name= "Open Port 80" dir=in action=allow protocol=TCP localport=80

删除启用的程序或端口^{(Delete enabled programs or ports)}

netsh advfirewall firewall delete rule name= rule name program="C:MyAppMyApp.exe"

netsh advfirewall firewall delete rule name= rule name protocol=udp localport=500

启用特定服务^{(Enable specific services)}

netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=Yes

netsh advfirewall firewall set rule group="remote desktop" new enable=Yes

启用 Windows 防火墙^{(Enable Windows firewall)}

netsh advfirewall set currentprofile state on

恢复策略默认值^{(Restore policy defaults)}

netsh advfirewall reset

您可以使用Netsh实用程序执行更多操作。

涵盖所有这些将超出范围，因此我们建议阅读官方 Microsoft 文档的更多详细信息。^{( official Microsoft Documents.)}

阅读下一篇^{(Read next)}：如何通过 Windows 防火墙允许 Ping（ICMP Echo 请求）^{(allow Pings (ICMP Echo requests) through Windows Firewall)}。

How to use the Netsh Command to manage Windows Firewall

Netsh or Network Shell is a command-line utility that helps IT admins configure and view various network-related functions on Windows 10. This utility can be used to manage Windows Firewall as well, and if you are looking for some straightforward ways that on the command line, then it is a useful utility to know and use.

Use Netsh Command to manage Windows Firewall

Windows Firewall configuration is available deep into the settings, which makes it uncountable. There are no context menus and a one-step method to get a few things done. It is beneficial when you need to do that often. You can save the command in a BAT file and run it with admin permission to execute it quickly.

There used to be netsh firewall command, but that has been replaced or will be deprecated by netsh advfirewall.

The list of options you get the advfirewall are as follows:

• consec – Changes to the `netsh advfirewall consec’ context.
• dump – Displays a configuration script.
• export – Exports the current policy to a file.
• firewall – Changes to the `netsh advfirewall firewall’ context.
  • add – Adds a new inbound or outbound firewall rule.
  • delete – Deletes all matching firewall rules.
  • dump – Displays a configuration script.
  • set – Sets new values for properties of an existing rule.
  • show – Displays a specified firewall rule.
• help – Displays a list of commands.
• import – Imports a policy file into the current policy store.
• mainmode – Changes to the `netsh advfirewall mainmode’ context.
• monitor – Changes to the `netsh advfirewall monitor’ context.
• reset – Resets the policy to the default out-of-box policy.
• set – Sets the per-profile or global settings.
• show – Displays profile or global properties.

List of Firewall Commands (Examples)

Here is the list of some common commands you can use, such as to enable ports, allow programs, and so on.

Enable a Port

netsh advfirewall firewall add rule name= "Open Port 80" dir=in action=allow protocol=TCP localport=80

Delete enabled programs or ports

netsh advfirewall firewall delete rule name= rule name program="C:\MyApp\MyApp.exe"

netsh advfirewall firewall delete rule name= rule name protocol=udp localport=500

Enable specific services

netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=Yes

netsh advfirewall firewall set rule group="remote desktop" new enable=Yes

Enable Windows firewall

netsh advfirewall set currentprofile state on

Restore policy defaults

netsh advfirewall reset

There are many more things that you can do with Netsh utility.

Covering all of them will be out of scope, and hence we recommend reading more details on the official Microsoft Documents.

Read next: How to allow Pings (ICMP Echo requests) through Windows Firewall.

Related posts

• Windows Firewall是防止或阻止到您的计算机连接

• 如何恢复或重置Windows Firewall设置为默认设置

• 如何在Windows Firewall Block或在Port中打开Port

• 如何允许Pings（ICMP Echo请求）到Windows Firewall

• Windows Firewall无法在Windows 10上识别Domain network

• Windows Firewall service在Windows 10中无法启动

• Windows 防火墙成为最佳防火墙之一的 5 个原因

• 调整 Windows 10 防火墙规则和设置

• 打开 Windows Defender 防火墙的 5 种方法 -

• Windows 10中的进口，Export，Repair，Restore Default Firewall Policy

• Fix error 0x8007042c为Windows Update or Firewall

• 什么是Windows 10中的Firewall and Network Protection以及如何隐藏此部分

• 如何在Windows 11/10中运行Command Prompt作为Administrator

• Windows Firewall无法更改您的一些设置

• 在Windows 10上打开或Off Windows Defender Firewall Notifications

• 使用 Windows Defender 防火墙阻止应用和游戏访问 Internet

• Fix Windows Firewall Windows 10中的问题

• Windows 11/10中的CMD or Command Prompt keyboard shortcuts列表

• 如何重置 Windows 防火墙设置（4 种方法）

• 如何在Windows 11/10中配置Windows Firewall