Windows中通过C++自动添加防火墙例外规则

在C++程序中无法直接控制防火墙警报窗口的显示，因为这是由操作系统和防火墙软件控制的。防火墙警报窗口是为了提醒用户程序正在尝试与外部网络进行通信，以确保用户意识到可能的网络活动。

然而，可以通过编写C++程序在用户的系统上自动添加防火墙例外规则，从而避免防火墙警报窗口的显示，以下是代码示例方法：

#include <iostream>
#include <Windows.h>
#include <netfw.h>

int add_firewall_whitelist()
{
    // 初始化COM库
    HRESULT hr = CoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
    if (SUCCEEDED(hr)) {
        // 创建INetFwPolicy2对象
        INetFwPolicy2* pFwPolicy = nullptr;
        hr = CoCreateInstance(__uuidof(NetFwPolicy2), nullptr, CLSCTX_INPROC_SERVER,
            __uuidof(INetFwPolicy2), reinterpret_cast<void**>(&pFwPolicy));
        if (SUCCEEDED(hr)) {
            // 创建规则对象
            INetFwRule* pFwRule = nullptr;
            hr = CoCreateInstance(__uuidof(NetFwRule), nullptr, CLSCTX_INPROC_SERVER,
                __uuidof(INetFwRule), reinterpret_cast<void**>(&pFwRule));
            if (SUCCEEDED(hr)) {
                // 配置规则属性
                BSTR ruleName = SysAllocString(L"MyAppRule");
                pFwRule->put_Name(ruleName);
                SysFreeString(ruleName);

                BSTR exePath = SysAllocString(L"C:\\Path\\To\\Your\\Program.exe");// 替换为你的程序路径
                pFwRule->put_ApplicationName(exePath);
                pFwRule->put_Action(NET_FW_ACTION_ALLOW);
                pFwRule->put_Direction(NET_FW_RULE_DIR_IN);
                pFwRule->put_Enabled(VARIANT_TRUE);
                pFwRule->put_Profiles(NET_FW_PROFILE2_ALL);

                // 将规则添加到防火墙策略中
                INetFwRules* pFwRules = NULL;
                hr = pFwPolicy->get_Rules(&pFwRules);
                if (SUCCEEDED(hr)) {
                    hr = pFwRules->Add(pFwRule);
                    if (SUCCEEDED(hr)) {
                        std::cout << "Rule added successfully" << std::endl;
                    }
                    pFwRules->Release();
                }
                SysFreeString(exePath);
                pFwRule->Release();
            }

            pFwPolicy->Release();
        }
        // 释放COM库资源
        CoUninitialize();
    }
    return 0;  
}

 下面是传入参数的形式向防火墙中添加例外规则

#include <iostream>
#include <Windows.h>
#include <netfw.h>
#include <string.h>
#include <tchar.h>
#include <fstream>

int main(int argc, char* argv[]) {
    /* 打开文件以写入 */
    std::ofstream outputFile("firewall_setting.log", std::ios::app); 
    if (outputFile.is_open()) {
        if (argc != 3) {
            outputFile << "The parameter is invalid" << std::endl;
            outputFile.close();

            return 1;
        }
        /* 写入数据 */
        outputFile << argv[0] << std::endl;
        outputFile << argv[1] << std::endl;
    }

    /* 初始化COM库 */
    HRESULT hr = CoInitializeEx(NULL, COINIT_APARTMENTTHREADED);
    if (SUCCEEDED(hr)) {
        /* 创建INetFwPolicy2对象 */ 
        INetFwPolicy2* pFwPolicy = nullptr;
        hr = CoCreateInstance(__uuidof(NetFwPolicy2), nullptr, CLSCTX_INPROC_SERVER,
            __uuidof(INetFwPolicy2), reinterpret_cast<void**>(&pFwPolicy));
        if (SUCCEEDED(hr)) {
            for (int i = 0; i < argc; ++i) {
                if (i == 0) {
                    continue;
                }

                /* 创建规则对象 */
                INetFwRule* pFwRule = nullptr;
                hr = CoCreateInstance(__uuidof(NetFwRule), nullptr, CLSCTX_INPROC_SERVER,
                    __uuidof(INetFwRule), reinterpret_cast<void**>(&pFwRule));
              
                wchar_t exeName[128] = { 0 };;
                size_t convertedChars = 0;
                errno_t result = mbstowcs_s(&convertedChars, exeName, strlen(argv[i]) + 1, argv[i], _TRUNCATE);
                if (result == 0) {
                    outputFile << "Converted characters:" << convertedChars << std::endl;
                    /* 配置指定规则属性 */
                    TCHAR* lastBackslash = _tcsrchr(exeName, '.');
                    if (lastBackslash != nullptr) {
                        *lastBackslash = '\0'; // 将路径中的最后一个反斜杠替换为字符串终止符
                    }
                    outputFile << "current work dir:" << exeName << std::endl;

                    BSTR ruleName = SysAllocString(exeName);
                    pFwRule->put_Name(ruleName);
                    SysFreeString(ruleName);

                    // 获取当前可执行文件的路径
                    TCHAR buffer[MAX_PATH] = { 0 };
                    DWORD pathLength = GetModuleFileName(NULL, buffer, MAX_PATH);
                    if (pathLength > 0) {
                        // 从路径中提取工作目录部分
                        lastBackslash = _tcsrchr(buffer, '\\');
                        if (lastBackslash != nullptr) {
                            *lastBackslash = '\0'; // 将路径中的最后一个反斜杠替换为字符串终止符
                        }
                    }

                    wchar_t rulePath[128] = { 0 };;
                    result = mbstowcs_s(&convertedChars, rulePath, strlen(argv[i]) + 1, argv[i], _TRUNCATE);
                    if (result == 0) {
                        TCHAR str1[28] = L"\\";
                        _tcscat_s(buffer, MAX_PATH, str1);
                        _tcscat_s(buffer, MAX_PATH, rulePath);
                        BSTR exePath = SysAllocString(buffer);
                        pFwRule->put_ApplicationName(exePath);
                        pFwRule->put_Action(NET_FW_ACTION_ALLOW);
                        pFwRule->put_Direction(NET_FW_RULE_DIR_IN);
                        pFwRule->put_Enabled(VARIANT_TRUE);
                        pFwRule->put_Profiles(NET_FW_PROFILE2_ALL);

                        /* 将规则添加到防火墙策略中 */
                        INetFwRules* pFwRules = nullptr;
                        hr = pFwPolicy->get_Rules(&pFwRules);
                        if (SUCCEEDED(hr)) {
                            hr = pFwRules->Add(pFwRule);
                            if (SUCCEEDED(hr)) {
                                outputFile << "Rule added successfully" << std::endl;
                            }
                            else {
                                outputFile << "Rule added Failed" << std::endl;
                            }
                            pFwRules->Release();
                        }
                        SysFreeString(exePath);
                    }
                }
                else {
                    outputFile << "mbstowcs_s failed with error code :" << result << std::endl;
                }
                pFwRule->Release();
            }
            pFwPolicy->Release();
        }
        else {
            outputFile << "Failed to create INetFwPolicy2 object" << std::endl;
        }
        /* 释放COM库资源 */
        CoUninitialize();
    }
    else {
        outputFile << "Failed to initialize COM library" << std::endl;
    }

    /* 关闭文件 */
    outputFile.close();

	return 1;
}