Solved How to allow incoming connections from specific ip address?

[peter7277]

The default settings on the firewall are to block all incoming connection and allow all outgoing. My laptop and my android tablet are connected to my wireless home network, and i have some apps on my tablet which i need to connect to my laptop. How to create firewall rule which will allow all connections from the tablet ip address?

 

[samuria]

Normally there is a setting to allow trafifc on the local subnet

 

[Barman58]

There are a number of parameters that need to be setup to allow communication between Android and PC this can be done manually within windows but you would need to know the data types and the Port s that are to be used.

It may be simpler to use a 3rd party solution - One such is Airdroid that is free, (with some limitations), that will do all the work for you

You need an app on your tablet and either a small app on the PC or you can use a web based solution on the PC

Take a look here ... Home | AirDroid

 

[peter7277]

I want to do this without installing any application on my laptop.I just want to know if i can create a rule that will allow incoming connection from specific ip address and block all other incoming connection. For example, i have Total Commander app wiht LAN plugin on my tablet and if i want to connect to my laptop i have to allow all incoming connection, and i don't want to do that. I want to block all incoming connections and create rules only for connections from specific ip addresses.

 

[johnhoh]

the CMD command

netsh advfirewall firewall add rule name="Allow from 192.0.55.55" dir=in action=allow protocol=ANY remoteip=192.0.55.55

will allow all inbound traffic from 192.0.55.55

I assume you could also do this by adding a new rule in windows firewall advanced settings in the control panel gui

You should also go into your router and make sure to set your inbound device to a static address (192.0.55.55 in the above example), otherwise it won't always have the same address and will not be able to get in

 

[samuria]

You don't state the firewall is it windows or third party?

 

[peter7277]

netsh advfirewall firewall add rule name="Allow from 192.0.55.55" dir=in action=allow protocol=ANY remoteip=192.0.55.55

will allow all inbound traffic from 192.0.55.55

I assume you could also do this by adding a new rule in windows firewall advanced settings in the control panel gui

You should also go into your router and make sure to set your inbound device to a static address (192.0.55.55 in the above example), otherwise it won't always have the same address and will not be able to get in

Thanks, it worked. But how to do that also from the gui?

 

[peter7277]

You don't state the firewall is it windows or third party?

I am using the windows firewall.

 

[johnhoh]

Thanks, it worked. But how to do that also from the gui?

control panel > windows firewall > advanced settings > right click on Inbound Rules > New Rule, then you figure it out from there. Have never done it.

 

[peter7277]

the CMD command

netsh advfirewall firewall add rule name="Allow from 192.0.55.55" dir=in action=allow protocol=ANY remoteip=192.0.55.55

will allow all inbound traffic from 192.0.55.55

I assume you could also do this by adding a new rule in windows firewall advanced settings in the control panel gui

You should also go into your router and make sure to set your inbound device to a static address (192.0.55.55 in the above example), otherwise it won't always have the same address and will not be able to get in

How to allow incoming connections for ip range? For example, for ip addresses from 198.168.0.101 to 198.168.0.120

 

[johnhoh]

How to allow incoming connections for ip range? For example, for ip addresses from 198.168.0.101 to 198.168.0.120

no idea. but try this:

open notepad to a new file, call it openup.cmd, put a bunch of lines in it like this:
---------------------------------
netsh advfirewall firewall add rule name="Allow from 192.0.0.101" dir=in action=allow protocol=ANY remoteip=192.0.0.101

netsh advfirewall firewall add rule name="Allow from 192.0.0.102" dir=in action=allow protocol=ANY remoteip=192.0.0.102
---------------------

up to 120. Save the file, add it to your startup folder. Make sure it is not a txt file, it has to be a cmd file.

---------------

edit

based on this page

How to block IP ranges in Windows Firewall - gHacks Tech News

the command

netsh advfirewall firewall add rule name="Allow from 192.0.0.100/120" dir=in action=allow protocol=ANY remoteip=192.0.0.100/120

might be the syntax that specifies the range from 100 to 120.

 

[peter7277]

based on this page

How to block IP ranges in Windows Firewall - gHacks Tech News

the command

netsh advfirewall firewall add rule name="Allow from 192.0.0.100/120" dir=in action=allow protocol=ANY remoteip=192.0.0.100/120

might be the syntax that specifies the range from 100 to 120.

It worked but for some reason if i use this ip range format '192.168.0.101/120' i get this error "A specified IP address or address keyword is not valid.". I had to use this format to make it work - '192.168.0.0/24'

 

[johnhoh]

maybe it needs to start with 0. A dash instead of a slash might also work