关闭135/137/138/139/445端口防止勒索病毒

最新推荐文章于 2020-11-30 11:15:20 发布

似剑非攻_墨眉无锋

最新推荐文章于 2020-11-30 11:15:20 发布

阅读量5.6k

点赞数 1

分类专栏： other 文章标签：勒索病毒关闭端口 135 137 1

本文链接：https://blog.csdn.net/ivory_town1/article/details/72187887

版权

other 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

目前勒索病毒软件疯狂，因此本人小小的写了一个关闭端口的bat脚本

把一下内容写到记事本，保存为bat可执行文件即可。目前测试了win7，win10，win2008 r2都没问题。欢迎反馈

netsh ipsec static delete policy name = SECCPP

netsh ipsec static add policy name = SECCPP description=安全策略201705
netsh ipsec static add filteraction name = Block action = block
netsh ipsec static add filterlist name = SECCPF
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 135 protocol = TCP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 137 protocol = TCP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 138 protocol = TCP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 139 protocol = TCP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 445 protocol = TCP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 137 protocol = UDP
netsh ipsec static add filter filterlist = SECCPF srcaddr=Any dstaddr = Me dstport = 138 protocol = UDP
netsh ipsec static add rule name=SECCPR policy=SECCPP filterlist=SECCPF filteraction=Block
netsh ipsec static set policy name = SECCPP assign = y
pause

exit