C# 操作系统防火墙

很多时候，我们的程序是通过网络通信（如TCP或者UDP协议+端口），而将制作好的程序安装包给客户用时，发现会出现不能通信的现象（或者在这台电脑是可以的，却在另一台不可以），原因是防火墙阻止了，需要添加防火墙例外。现在将代码记录下来，方便以后备用。

在Visual studio 项目引用右键里面添加引用，选中COM然后找到NetFwTypeLib，确认，然后新建类FireWallHelp.cs添加

using NetFwTypeLib;

代码如下

 using System;
 using System.Collections.Generic;
 using System.Text;
 using NetFwTypeLib;

 namespace FireWallTest
 {
     public  class FireWallHelp
     {
         /// <summary>
         /// 添加防火墙例外端口
         /// </summary>
         /// <param name="name">名称</param>
         /// <param name="port">端口</param>
         /// <param name="protocol">协议(TCP、UDP)</param>
         public static void NetFwAddPorts(string name, int port, string protocol)
         {
             //创建firewall管理类的实例
             INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr"));

             INetFwOpenPort objPort = (INetFwOpenPort)Activator.CreateInstance(
                 Type.GetTypeFromProgID("HNetCfg.FwOpenPort"));

             objPort.Name = name;
             objPort.Port = port;
             if (protocol.ToUpper() == "TCP")
             {
                 objPort.Protocol = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP;
             }
             else
             {
                 objPort.Protocol = NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP;
             }
             objPort.Scope = NET_FW_SCOPE_.NET_FW_SCOPE_ALL;
             objPort.Enabled = true;

             bool exist = false;
             //加入到防火墙的管理策略
             foreach (INetFwOpenPort mPort in netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts)
             {

                 if (objPort == mPort)
                 {
                     exist = true;
                     break;
                 }
             }
             if (exist)
             {
                 System.Windows.Forms.MessageBox.Show("exist");
             }
             if (!exist) netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Add(objPort);
         }
         /// <summary>
         /// 将应用程序添加到防火墙例外
         /// </summary>
         /// <param name="name">应用程序名称</param>
         /// <param name="executablePath">应用程序可执行文件全路径</param>
         public static void NetFwAddApps(string name, string executablePath)
         {
             //创建firewall管理类的实例
             INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr"));

             INetFwAuthorizedApplication app = (INetFwAuthorizedApplication)Activator.CreateInstance(
                 Type.GetTypeFromProgID("HNetCfg.FwAuthorizedApplication"));

             //在例外列表里，程序显示的名称
             app.Name = name;

             //程序的路径及文件名
             app.ProcessImageFileName = executablePath;

             //是否启用该规则
             app.Enabled = true;

             //加入到防火墙的管理策略
             netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications.Add(app);

             bool exist = false;
             //加入到防火墙的管理策略
             foreach (INetFwAuthorizedApplication mApp in netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications)
             {
                 if (app == mApp)
                 {
                     exist = true;
                     break;
                 }
             }
             if (!exist) netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications.Add(app);
         }
         /// <summary>
         /// 删除防火墙例外端口
         /// </summary>
         /// <param name="port">端口</param>
         /// <param name="protocol">协议（TCP、UDP）</param>
         public static void NetFwDelApps(int port, string protocol)
         {
             INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr"));
             if (protocol == "TCP")
             {
                 netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Remove(port, NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_TCP);
             }
             else
             {
                 netFwMgr.LocalPolicy.CurrentProfile.GloballyOpenPorts.Remove(port, NET_FW_IP_PROTOCOL_.NET_FW_IP_PROTOCOL_UDP);
             }
         }
         /// <summary>
         /// 删除防火墙例外中应用程序
         /// </summary>
         /// <param name="executablePath">程序的绝对路径</param>
         public static void NetFwDelApps(string executablePath)
         {
             INetFwMgr netFwMgr = (INetFwMgr)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwMgr"));

             netFwMgr.LocalPolicy.CurrentProfile.AuthorizedApplications.Remove(executablePath);

         }
     }
 }

转载地址：http://www.cnblogs.com/ITBread/archive/2012/04/29/2476170.html