Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm installing NSClient++ so our Nagios system can monitor some windows servers using NRPE. I need to punch a hole in our IPSec policy to allow inbound connections on port 5666 from the Nagios server.

I find the Windows IPSec IP filter a bit counter intuitive at times (IP Tables is more my bag), so I'm wondering if someone from the community could confirm that the add filter command below does actually configure the following rule:


Allow inbound connections to port 5666 from remote host

These are the netsh commands I used:

netsh ipsec static add filter filterlist="NAGIOS NSClient" 
      srcaddr= srcport=0 
      dstaddr=ME dstport=5666 

I then add this to an existing IPSec policy rule using:

netsh ipsec static add rule name=NAGIOS 
      filterlist="NAGIOS NSClient"  

I did test by trying to connect to this windows server from two different machines and the rules seem to work, but for my own sanity it would be nice for someone to cast their expert eye over the above, just in case.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.