Hi Brian,
You can effectively block ports by using TCP/IP filtering (e.g. WinXP) and probably other Windows platforms.
There are four Registry Values for TCP/IP filtering in the key:
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
where the specific settings for each interface are configured in the key:
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\Interfac e_GUID. <---Note: no space
The Registry values to configure TCP/IP filtering are:
EnableSecurityFilters: DWORD Type; 1 enables TCP/IP filtering; 0 disables it.
UdpAllowedPorts: MULTI_SZ Type; 0 allows all UDP ports; an empty (null value) blocks all UDP ports, otherwise, the specific allowed UDP ports are listed.
TCPAllowedPorts: MULTI_SZ Type; 0 allows all TCP ports; an empty (null value) blocks all TCP ports, otherwise, the specific allowed TCP ports are listed.
RawIpAllowedProtocols: MULTI_SZ Type; 0 allows all IP protocols; an empty (null value) blocks all IP protocols, otherwise, the specific allowed IP protocols are listed.
Looks like a lot of work to get it right without a tool. You might try searching the MS website for: Tcp/Ip filtering +tool
or the MS Technet.
-- Tom
__________________ The independence created by philosophical insight is - in my opinion - the mark of distinction
between a mere artisan or specialist and a real seeker after truth. - Einstein 1944
Imagination is more important than knowledge. - Einstein |