Step 1: Click Start Menu/Settings/Control Panel/Administrative Tools, double-click to open Local Security Policy, select IP Security Policy on Local Computer, right-click in a blank position in the right pane to pop up a shortcut menu, and then select Create IP Security Policy to pop up the wizard. Click the Next button in the wizard to name the new security policy; Press Next again, and the Secure Communication Request screen will be displayed. Remove the check on the left side of "Activate Default Corresponding Rules" on the screen, and click "Finish" to create a new IP security policy.

Step 2: Right-click the IP security policy, remove the hook on the left of "Use the Add Wizard" in the Properties dialog box, then click "Add" to add a new rule, and then the New Rule Properties dialog box will pop up. Click "Add" on the screen to pop up the IP filter list window. In the list, first remove the check on the left of "Use the Add Wizard", and then click the "Add" button on the right to add a new filter.

Step 3, enter the Filter Properties dialog box. The first thing you see is the address. Select "any IP address" as the source address and "My IP address" as the destination address. Click the "Protocol" tab, select "TCP" in the "Select Protocol Type" drop-down list, then enter "135" in the text box under "To this port" and click the "OK" button, thus adding a filter to block the TCP 135(RPC) port, which can prevent the outside world from passing through 6544.

Click OK and return to the filter list dialog box. You can see that a policy has been added. Repeat the above steps, continue to add TCP 137, 139, 445, 593 ports and UDP 135, 139, 445 ports, and establish corresponding filters for them.

Repeat the above steps, add the shielding policies of TCP ports 1025, 2745, 3 127, 6 129 and 3389, establish the filters of the above ports, and finally click OK.

Step 4: In the "New Rule Properties" dialog box, select "New IP Filter List", then click the circle on its left to add a dot to indicate that it has been activated, and finally click the "Filter Action" tab. In the Filter Action tab, remove the check on the left side of Use the Add Wizard, click the Add button, and add the Block action: in the Security Measures tab of the New Filter Action Properties, select Block, and then click the OK button.

Step 5: Enter the "New Rule Attribute" dialog box and click "New Filter Action". A dot will be added in the circle on the left to indicate that it has been activated. Click Close to close the dialog box; Finally, return to the "New IP Security Policy Properties" dialog box, check the "New IP Filter List" on the left, and then press "OK" to close the dialog box. In the Local Security Policy window, right-click the newly added IP security policy and select Assign.

So after the restart, the above network ports in the computer are closed, and viruses and hackers can no longer connect to these ports, thus protecting your computer.