CmdID

CmdID / Commands / netsh

netsh rpc

The netsh rpc command enables administrators to configure, manage, and troubleshoot Remote Procedure Call (RPC) service settings, including selective binding, firewall filtering, and access control for RPC traffic. Windows commands reference

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0
netsh rpc [add | delete | dump | filter | help | reset | show | ?]
netsh rpc add <subnet>
netsh rpc delete <subnet>
netsh rpc dump
netsh rpc filter add condition [field=]<string> [matchtype=]<string> [data=]<string>
netsh rpc filter add filter
netsh rpc filter add rule [layer=]<string> [actiontype=]<string> [[filterkey=]<string>]
[persistence=]volatile [audit=]enable [auditparameters=]enable
netsh rpc reset
netsh rpc show

To add the specified subnet 192.168.1.0 to the RPC "add list", run the following command

netsh rpc add 192.168.1.0Identify

To add a filter condition that applies to RPC traffic where the local IPv4 address is exactly 192.168.1.10, run the following command

netsh rpc filter add condition field=local_addr_v4 matchtype=equal data=192.168.1.10Identify

To apply a rule to the Endpoint Mapper layer permitting traffic for a specific UUID, along with persistence after a reboot and logged for auditing, run the following command

netsh rpc filter add rule layer=epmap actiontype=permit filterkey={Your-UUID} persistence=yes audit=yesIdentify
rpc addAdds one or more subnets (IP address) to an "add" list managed by the RPC service.
rpc deleteAdds one or more subnets (IP address) to a "delete" list, implying these subnets are to be removed from existing configurations.
rpc dumpCreates a script containing the current context configuration. The script can be saved to a file and used to restore settings if they're altered or need to be replicated on another system.
rpc filter add conditionCreates precise firewall rules to control RPC traffic based on specific conditions. field=<string> - Specifies the aspect of the RPC communication where the condition applies. For um (User Mode), acceptable values are: - if_uuid - Interface UUID - if_version - Interface version - if_flag - Interface flag - dcom_app_id - DCOM Application ID - image_name - The executable image involved in the RPC call - protocol - Protocol used (like TCP) - auth_type - Type of authentication used - auth_level - Level of authentication enforced - sec_encrypt_alg - Security encryption algorithm - sec_key_size - Size of the security key - remote_user_token - Token for remote user authentication - local_addr_v4 - Local IPv4 address - local_addr_v6 - Local IPv6 address - remote_addr_v4 - Remote IPv4 address - remote_addr_v6 - Remote IPv6 address - local_port - Local communication port - pipe - Named pipe used in the connection - opnum - Operation number For epmap (Endpoint Mapper), acceptable values are: - Similar values as user mode but without opnum. For ep_add (Endpoint Address), acceptable values are: - process_with_if_uuid - Process associated with the interface UUID - protocol: Protocol used …
rpc filter add filterAdds an RPC firewall filter. Before you can add a filter, you must first define at least one rule and one or more conditions.
rpc filter add ruleAdds an RPC firewall filter rule. layer=<string> - Specifies the layer where the filter is applied. Acceptable values are: - um - User Mode - epmap - Endpoint Mapper - ep_add - Endpoint Address - proxy_conn - Proxy Connection - proxy_if - Proxy Interface actiontype=<string> - Defines the action to take when the filter matches. Acceptable values are: - block - Blocks the RPC traffic - permit - Allows the RPC traffic. - continue - Continues to the next filter for evaluation. filterkey=<string> - Specifies a unique UUID that identifies the RPC firewall filter. Useful for managing or referencing specific filters. persistence - Determines whether the filter remains after a reboot. By default, filters are persistent. audit - Enables auditing for this filter. Only filters with the "permit" action type can have auditing enabled. Auditing isn't supported at the ep_add layer. auditparameters - Enables auditing of RPC call parameter buffers for this filter. Requires audit to be enabled. Auditing of parameters is only supported at the um layer.
rpc resetResets the selective binding configuration so that the system listens on all network interfaces (no subnets are restricted).
rpc showDisplays the current selective binding configuration, listing each subnet and its binding state on the system.
help or ?Displays a list of commands and their descriptions in the current context.