通过代码操作防火墙的方式有两种:一是代码操作修改注册表启用或关闭防火墙;二是直接操作防火墙对象来启用或关闭防火墙。不论哪一种方式,都需要使用管理员权限,所以操作前需要判断程序是否具有管理员权限。# P) E) `7 r0 [( ^7 M: j l6 P2 H% [
1、判断程序是否拥有管理员权限
/ f% e% @2 b$ ~2 G+ K 需要引用命名空间:System.Security.Principal
- L3 ~' A' |0 ^) D" A& X7 d
- /// <summary>
- /// 判断程序是否拥有管理员权限
- /// </summary>
- /// <returns>true:是管理员;false:不是管理员</returns>
- public static bool IsAdministrator()
- {
- WindowsIdentity current = WindowsIdentity.GetCurrent();
- WindowsPrincipal windowsPrincipal = new WindowsPrincipal(current);
- return windowsPrincipal.IsInRole(WindowsBuiltInRole.Administrator);
- }
2、注册表修改防火墙
* \) s; F% ]. G# Y 需要引用命名空间:Microsoft.Win32
% w$ m; V" ]$ [* O) I- /// <summary>
- /// 通过注册表操作防火墙
- /// </summary>
- /// <param name="domainState">域网络防火墙(禁用:0;启用(默认):1)</param>
- /// <param name="publicState">公共网络防火墙(禁用:0;启用(默认):1)</param>
- /// <param name="standardState">专用网络防火墙(禁用:0;启用(默认):1)</param>
- /// <returns></returns>
- public static bool FirewallOperateByRegistryKey(int domainState=1, int publicState = 1, int standardState = 1)
- {
- RegistryKey key = Registry.LocalMachine;
- try
- {
- string path = "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\SharedAccess\\Defaults\\FirewallPolicy";
- RegistryKey firewall = key.OpenSubKey(path, true);
- RegistryKey domainProfile = firewall.OpenSubKey("DomainProfile", true);
- RegistryKey publicProfile = firewall.OpenSubKey("PublicProfile", true);
- RegistryKey standardProfile = firewall.OpenSubKey("StandardProfile", true);
- domainProfile.SetValue("EnableFirewall", domainState, RegistryValueKind.DWord);
- publicProfile.SetValue("EnableFirewall", publicState, RegistryValueKind.DWord);
- standardProfile.SetValue("EnableFirewall", standardState, RegistryValueKind.DWord);
- }
- catch (Exception e)
- {
- string error = $"注册表修改出错:{e.Message}";
- throw new Exception(error);
- }
- return true;
- }
3、直接操作防火墙对象+ \' n) `/ Q+ d. Y& f
需要在项目引用中添加对NetFwTypeLib的引用,并引用命名空间NetFwTypeLib
; L4 g- `5 L" Q# U; J) T" D) q2 W- a* L3 A
- /// <summary>
- /// 通过对象防火墙操作
- /// </summary>
- /// <param name="isOpenDomain">域网络防火墙(禁用:false;启用(默认):true)</param>
- /// <param name="isOpenPublicState">公共网络防火墙(禁用:false;启用(默认):true)</param>
- /// <param name="isOpenStandard">专用网络防火墙(禁用: false;启用(默认):true)</param>
- /// <returns></returns>
- public static bool FirewallOperateByObject(bool isOpenDomain = true, bool isOpenPublicState = true, bool isOpenStandard = true)
- {
- try
- {
- INetFwPolicy2 firewallPolicy = (INetFwPolicy2)Activator.CreateInstance(Type.GetTypeFromProgID("HNetCfg.FwPolicy2"));
- // 启用<高级安全Windows防火墙> - 专有配置文件的防火墙
- firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PRIVATE, isOpenStandard);
- // 启用<高级安全Windows防火墙> - 公用配置文件的防火墙
- firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_PUBLIC, isOpenPublicState);
- // 启用<高级安全Windows防火墙> - 域配置文件的防火墙
- firewallPolicy.set_FirewallEnabled(NET_FW_PROFILE_TYPE2_.NET_FW_PROFILE2_DOMAIN, isOpenDomain);
- }
- catch (Exception e)
- {
- string error = $"防火墙修改出错:{e.Message}";
- throw new Exception(error);
- }
- return true;
- }
|