First of all this does not contain my answer.
I want to find which firewall rule allows specific port 1433
In my server, Plesk has been installed and “MS SQL over TCP protocol” firewall rule is disabled. Somehow I can connect to the SQL Server from remote connection. There is one firewall rule allows 1433 TCP Connection but which one? Is there any command to find which firewall rule allows 1433.
2
Answers
Source
Run as administrator
Easiest way to figure this out is through netevents.
netsh wfp cap start keywords=19
netsh wfp cap stop
<localPort>1433</localPort>
and get filterId from<classifyAllow>
<displayData>
should tell you which rule allowed the packet.