windows 通過cmd命令行管理防火牆

（1）恢復初始防火牆設置
    netsh advfirewall reset
（2）關閉防火牆
    netsh advfirewall set allprofiles state off
（3）啟用桌面防火牆
    netsh advfirewall set allprofiles state on
（4）設置默認輸入和輸出策略
    netsh advfirewall set allprofiles firewallpolicy allowinbound,allowoutbound
    以上是設置為允許，如果設置為拒絕使用blockinbound,blockoutbound
（5）關閉tcp協議的139端口
    netsh advfirewall firewall add rule name=”deny tcp 139″ dir=in protocol=tcp localport=139 action=block
（6）關閉udp協議的139端口
    netsh advfirewall firewall add rule name=”deny udp 139″ dir=in protocol=udp localport=139 action=block
（7）關閉tcp協議的445端口
    netsh advfirewall firewall add rule name=”deny tcp 445″ dir=in protocol=tcp localport=445 action=block
（8）關閉udp協議的445端口
    netsh advfirewall firewall add rule name=”deny udp 445″ dir=in protocol=udp localport=445 action=block
（9）使用相同的方法，依次關閉TCP協議的21、22、23、137、138、3389、5800、5900端口。
    netsh advfirewall firewall add rule name= “deny tcp 21″ dir=in protocol=tcp localport=21 action=block
    netsh advfirewall firewall add rule name= “deny tcp 22″ dir=in protocol=tcp localport=22 action=block
    netsh advfirewall firewall add rule name= “deny tcp 23″ dir=in protocol=tcp localport=23 action=block
    netsh advfirewall firewall add rule name= “deny tcp 3389″ dir=in protocol=tcp localport=3389 action=block 學習電腦
    netsh advfirewall firewall add rule name= “deny tcp 5800″ dir=in protocol=tcp localport=5800 action=block
    netsh advfirewall firewall add rule name= “deny tcp 5900″ dir=in protocol=tcp localport=5900 action=block
    netsh advfirewall firewall add rule name= “deny tcp 137″ dir=in protocol=tcp localport=137 action=block
    netsh advfirewall firewall add rule name= “deny tcp 138″ dir=in protocol=tcp localport=138 action=block

以上內容搬運自百度知道https://zhidao.baidu.com/question/2075121309871751268.html，稍作整理