建立 一個bat檔案，複製如下內容到bat檔案中，將檔案名稱命名為drop-udp.bat
複製代碼 代碼如下:
netsh ipsec static add policy name=dropudp
netsh ipsec static add filterlist name=allow-udp
netsh ipsec static add filterlist name=drop-udp
REM 添加篩選器到IP篩選器列表(允許上網)
netsh ipsec static add filter filterlist=allow-udp srcaddr=me dstaddr=any description=dns訪問 protocol=udp mirrored=yesdstport=53
netsh ipsec static add filter filterlist=allow-udp srcaddr=me dstaddr=any description=dns訪問 protocol=udp mirrored=yesdstport=123
netsh ipsec static add filter filterlist=allow-udp srcaddr=me dstaddr=any description=dns訪問 protocol=udp mirrored=yesdstport=161
REM 添加篩選器到IP篩選器列表(不讓別人訪問)
netsh ipsec static add filter filterlist=drop-udp srcaddr=any dstaddr=me description=別人到我任何訪問 protocol=udp mirrored=yes
REM 添加篩選器操作
netsh ipsec static add filteraction name=allow-udp-port action=permit
netsh ipsec static add filteraction name=drop-udp-port action=block
REM 建立一個連結指定 IPSec 策略、篩選器列表和篩選器操作的規則(加入規則到我的安全性原則)
netsh ipsec static add rule name=允許規則 policy=dropudp filterlist=allow-udp filteraction=allow-udp-port
netsh ipsec static add rule name=拒絕規則 policy=dropudp filterlist=drop-udp filteraction=drop-udp-port
REM 啟用我的安全性原則
netsh ipsec static setpolicy name=dropudp assign=y
儲存後，雙擊運行即可
udp除53 DNS解析，161 snmp監控連接埠 及時間同步服務123這三個udp的連接埠外，禁用所有udp出入站串連
