How do I configure access to a port for certain computers in the Windows Firewall?

Windows Firewall blocks network traffic unless specifically instructed otherwise. To allow the use of a certain port by specific computer(s), it is necessary to place an Exception in the Windows Firewall for the port.

Use the following steps to add an Exception for the local network in the Windows Firewall.

  1. From the Start menu, click Control Panel.

  2. In Control Panel, click Security Center.

  3. In the Windows Security Center window, in the Manage Security Settings For area, click Windows Firewall.

  4. In the Windows Firewall window, click the Exceptions tab, and then click Add Port.

  5. In the Add a Port dialog box, click Change scope.

  6. In the Change Scope dialog box, select the appropriate option.

    • Any computer (including those on the Internet) - The program can communicate with anyone that initiates a connection.
    • My network (subnet) only - This is for Local Subnet only. The program can communicate only with those requests generated on the machines local subnet. My network (subnet) only is the typical selection in this case.
    • Custom list - Specify address based on the subnet mask provided.
      • Add a network - Use the proper subnet mask. Example: 192.168.100.0/255.255.255.0
      • Add a single IP address - Use the entire IP address, and an all 255 subnet mask. This indicates to the firewall that all of the address represents the network, so only this single IP address is allowed. Example: 192.168.100.7/255.255.255.255