服務器上面很多時候會默認開啟一些弱端口，這些端口對于一般的用戶來說用不上的，所以為了防止出現(xiàn)這些弱端口被利用，我們可以在服務器上面點擊運行——cmd然后輸入以下的命令：

netsh ipsec static ^
add policy name=關閉危險端口
netsh ipsec static ^
add filteraction name=阻止端口 action=block
netsh ipsec static ^
add filterlist name=危險端口關閉
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP445端口 dstport=445 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP445端口 dstport=445 protocol=udp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP135端口 dstport=135 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP135端口 dstport=135 protocol=udp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP139端口 dstport=139 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP593端口 dstport=593 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP1025端口 dstport=1025 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP2531端口 dstport=2531 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP2745端口 dstport=2745 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP3127端口 dstport=3127 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕TCP6129端口 dstport=6129 protocol=tcp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP123端口 dstport=123 protocol=udp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP137端口 dstport=137 protocol=udp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP138端口 dstport=138 protocol=udp mirrored=yes
netsh ipsec static ^
add filter filterlist=危險端口關閉 srcaddr=any dstaddr=me description=拒絕UDP1900端口 dstport=1900 protocol=udp mirrored=yes
netsh ipsec static ^
add rule name=BlockAllAccess policy=關閉危險端口 filterlist=危險端口關閉 filteraction=阻止端口
netsh ipsec static set policy name=關閉危險端口 assign=y
exit