How to allow all traffic from 1 IP address Windows Firewall

windows-7 networking firewall

30,191

At host 192.168.1.2 (Windows 7)

incoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Incoming" dir=in action=allow protocol=ANY remoteip=192.168.1.3

outcoming 192.168.1.3 Firewall Off:

netsh advfirewall firewall add rule name="Firewall Off IP 192.168.1.3 Outcoming" dir=out action=allow protocol=ANY remoteip=192.168.1.3

logging firewall dropped packets:

netsh firewall set logging droppedpackets = ENABLE

Install telnet client and check remote application:

telnet 192.168.1.3 <service port>

Check whether the current user is an administrator in the domain:

dsquery * -filter "(&(objectCategory=person)(objectClass=user)(name=%username%)(adminCount=1))" -attr name

Check whether the current user is an administrator on the local machine:

wmic NETLOGIN  Where (Caption="%username%" AND Privileges=2) get Caption, Name, NumberOfLogons, PrimaryGroupId, BadPasswordCount

30,191

The Thirsty Ape

Updated on September 18, 2022

Comments

The Thirsty Ape over 1 year

I am trying to give another PC completely unrestricted access to my machine. They are both on the same subnet. What I am looking for is effectively disabling the firewall entirely for one IP address.

Example

Host: 192.168.1.2

Client: 192.168.1.3 Firewall "off"

World: xxx.xxx.xxx.xxx Firewall "on"

To be specific I am running "Easy"PHP as a testing server for websites and want to access them from other machines on my network. After tinkering I figure the method suggested in my question would be best to make things actually easy.

PS. I have already tried opening all ports both inbound and outbound to that IP with no results. My only current success has been actually turning the whole firewall off.
- Squeezy almost 11 years
  
  This is essentially superuser.com/questions/231358/… with a range of one IP :)
- Ramhound almost 11 years
  
  @Foo_Chow Follow the answers for this question just select allow instead of block superuser.com/questions/268902/…
- The Thirsty Ape almost 11 years
  
  @Squeezy not even close to a dupe. That is what I tried in the PS. section. Didnt work. Im looking for complete disabling to one IP.
- Squeezy almost 11 years
  
  You can not disable it for one IP, however accepting ANYTHING for that IP should not result in the firewall blocking traffic anymore. Please show the configuration you attempted.
- The Thirsty Ape almost 11 years
  
  @Squeezy link All other settings are all or any where applicable; done for both in and outbound
- Squeezy almost 11 years
  
  You are configuring the firewall on the host, please set Local IP address to any, and remote IP address to the one you want to give access. The configuration in that screenshot is valid, but useless. You have essentially configured access TO and FROM the same IPs.
Squeezy almost 11 years

+1 for netsh. Also I love the term "outcoming" :D Please mention this needs to be done from with privileges.
The Thirsty Ape almost 11 years

Honestly I have no clue why this doesnt work for me. It clearly should, but I guess EasyPHP is messing with something... Not easy in the slightest
The Thirsty Ape almost 11 years

Ping works though. So at least the communication barrier is down
Squeezy almost 11 years

@Foo_Chow, unless the IPs are wrong for your environment it definitely should. You can try logging drops as specified in technet.microsoft.com/de-de/library/cc947815(v=ws.10).aspx to see why your traffic is dropped. Maybe that will show you what is happening.
STTR almost 11 years

@Foo_Chow what say telnet 192.168.1.3 <service port> ?