Firewall Rules


  1. Posts : 2
    win 10,11 Server 2012-2022
       #1

    Firewall Rules


    Windows 10 1809 17763.3287

    I'm trying to make a registry file for disabling 5353 incoming. The issue is there are default ones in there from the os. I disabled them and exported the registry and added the 5353 ones to a reg file. It imports and works but on different pcs they have a different id # (see below)so mine gets imported but the one with the different id is still there and active. How can I disable all the 5353 rules without having to go into the firewall on 1500 pcs and manually disabling it. (Not on a domain)

    This I imported
    "{965FEC43-5926-4F0F-806C-60B6D3CFE183}"="v2.29|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=5353|App=C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe|Name=Google Chrome (mDNS-In)|Desc=Inbound rule for Google Chrome to allow mDNS traffic.|EmbedCtxt=Google Chrome|"

    But there was an active one with a different id so it was still active.
    "{D2557318-55C5-4194-B747-66E71C1A631A}"="v2.29|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe|Name=Google Chrome (mDNS-In)|Desc=Inbound rule for Google Chrome to allow mDNS traffic.|EmbedCtxt=Google Chrome|"
      My Computer


  2. Posts : 5,452
    Windows 11 Home
       #2

    Would this work?
    Code:
    reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableMDNS" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMulticast" /t REG_DWORD /d "0" /f
    Code:
    reg add "HKLM\Software\Policies\Google\Chrome" /v "EnableMediaRouter" /t REG_DWORD /d "0" /f
      My Computer


  3. Posts : 2
    win 10,11 Server 2012-2022
    Thread Starter
       #3

    TairikuOkami said:
    Would this work?
    Code:
    reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableMDNS" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMulticast" /t REG_DWORD /d "0" /f
    Code:
    reg add "HKLM\Software\Policies\Google\Chrome" /v "EnableMediaRouter" /t REG_DWORD /d "0" /f
    Would that completely disable mDNS? I don't want to do that at this point because we have multiple 3rd party software so I don't want to completely turn it off. I did figure out the following powershell command does disable any rule with 5353 port.
    Disable-NetFirewallRule | Where-Object { $_.LocalPort -eq 5353 } | Get-NetFirewallRule

    So now trying to figure out how to keep the rule I put in enabled. I think I can do it with kinda the same command but using the rule name since that one will always be the same.
      My Computer


  4. Posts : 822
    Microsoft Windows 10 Pro 64-bit
       #4

    Daves31 said:
    Would that completely disable mDNS? I don't want to do that at this point because we have multiple 3rd party software so I don't want to completely turn it off. I did figure out the following powershell command does disable any rule with 5353 port.
    Disable-NetFirewallRule | Where-Object { $_.LocalPort -eq 5353 } | Get-NetFirewallRule
    Blocking port 5353 in the firewall would also block mDNS.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:04.
Find Us




Windows 10 Forums