*****防火墙explorer应用程序规则*****

shenxiaofei

U版置顶帖“打磨Comodo，做有意义的事儿”中防火墙规则中的explorer应用程序规则如下：
Allow IP In From In [Local Area Network] To IP Any Where Protocol Is Any
Allow IP Out From IP Any To In [Local Area Network] Where Protocol Is Any
Allow IP Out From IP Any To In [Special & Local Multicast] Where Protocol Is Any
Allow HTTP Outgoing crl.microsoft.com Requests
[Allow TCP Out From IP Any To crl.microsoft.com Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Block and Log All Unmatching Requests
我想问的是前三条是不是局域网规则？第四条Distination Address如何设置？

[ 本帖最后由 shenxiaofei 于 2009-4-11 11:48 编辑 ]

shenxiaofei

不知哪位DX出来解释一下，XD先谢谢了。

秘书

把标签改为求助 应该能以其他人的关注

pastport

是的
按U版的条目
Local Area  Network  指向网关
要根据自己情况修改哦

Destination address  标签下
有个 Host name
输入网址即可

[ 本帖最后由 pastport 于 2009-4-11 10:40 编辑 ]

apcclxj

不懂，帮顶。

yitiaoxiaohe

explorer一般直接block

shenxiaofei

原帖是这么写的：Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
还要再添加你说的那个端口范围吗？

shenxiaofei

你的意思是SP改成High system dynamic ports（49152-65535）端口吗？Dynamic Ports 1025-5000还要不要？

zzl699

学习了。。。。。