[SOLVED] Example of creating a Windows firewall rule

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Answer
Gaelds
Messages: 254
Registration: Nov 22, 2015 - 08:37

October 2, 2024 - 11:06 AM

Hello,

could you please provide a code example for adding a firewall rule in Windows? The mBlock package is blocked when installed on machines where the firewall is enabled. I noticed this when manually running the mBlock 5.4.3 installation executable.
jlepiquet
Messages: 69
Registration: Sep 3, 2024 - 4:09 p.m.

October 2, 2024 - 3:09 PM

Good morning,

Code: Select all

# -*- coding: utf-8 -*-
from setuphelpers import *

def install():

    print(run('netsh advfirewall firewall add rule name="orbixd" program="%s" action=block dir=in profile=domain enable=no' % r'C:\program files\dassault systemes\b24\win_b64\code\bin\orbixd.exe'))
    print(run('netsh advfirewall firewall add rule name="DMUV5" program="%s" action=block dir=out profile=domain enable=yes'% r'C:\program files\dassault systemes\b24\win_b64\code\bin\DMU.exe'))
Gaelds
Messages: 254
Registration: Nov 22, 2015 - 08:37

October 2, 2024 - 3:40 PM

Thanks! I imagined there were setuphelper functions that I hadn't found. I'll try with netsh.

Regards
jlepiquet
Messages: 69
Registration: Sep 3, 2024 - 4:09 p.m.

October 2, 2024 - 5:01 PM

Good morning,

There is the command setuphelpers.add_netfirewallrule()
https://www.wapt.fr/apidoc/wapt-2.5/win ... rewallrule

Code: Select all

add_netfirewallrule(rule_name="orbixd", app_path='C:\program files\dassault systemes\b22\win_b64\code\bin\orbixd.exe', action="block", direction="Inbound", profile="domain", enabled=False)
Gaelds
Messages: 254
Registration: Nov 22, 2015 - 08:37

October 3, 2024 - 8:02 AM

Ah cool, thanks! That's exactly what I was looking for, but I must have searched very badly...
User avatar
dcardon
WAPT Expert
Messages: 1929
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

October 3, 2024 - 9:28 AM

Hi Gaël,

thanks for the feedback. There's a lot of information in the setuphelpers, and perhaps we don't highlight it enough. :-)

I'm marking the topic as RESOLVED.

Regards,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Answer