放行特定端口
 netsh advfirewall firewall add rule name="mysql" dir=in protocol=tcp localport=3306 action=allow
阻塞对特定IP的访问
netsh advfirewall firewall delete rule name="mysql" dir=out protocol=tcp remoteip="1.1.1.1" action=block