The ipsec bypass feature can be used for this purpose. It relies on the
authentication of the other peer using ipsec, then consults the Active
Directory against a group policy defined set of allowed computers which can
access all ports. This is really only going to be available in a corporate
environment.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Steve Athanas" wrote in message
...
Hi, everyone:

Does anyone know of a way to get Windows Firewall to allow access on all
ports to a specified IP address or subnet? I ask because I can allow
specific
ports, but wildcards like "*" don't seem to work.

Ideally, this would be done through group policy, but any means necessary
would be a good start.

Any thoughts out there?
--
Steve Athanas
Systems Analyst / Administrator

UMass Lowell Student Affairs
Cumnock Hall
1 University Ave.
Lowell, MA 01854