update README.md.

Signed-off-by: dcrenl <1017260+dcren@user.noreply.gitee.com>

CapabilityAccessManager/clear.bat

@@ -0,0 +1,11 @@
+net stop camsvc
+
+takeown /F "C:\ProgramData\Microsoft\Windows\CapabilityAccessManager" /R /D Y
+
+icacls "C:\ProgramData\Microsoft\Windows\CapabilityAccessManager" /grant "Administrators":F /T
+
+taskkill /f /im svchost.exe /fi "SERVICES eq camsvc"
+
+del /f /q "C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal"
+
+net start camsvc

README.md

@@ -12,3 +12,12 @@
 
 - /python/srf.py
 
+#### 批量设置windowsIP黑名单,禁止访问
+
+- /windows_ip_blacklist/batch.bat 批量设置到一个规则
+- /windows_ip_blacklist/signle.bat 批量设置每个IP一个规则
+- /windows_ip_blacklist/blacklist.txt 每行一个IP 
+
+#### 清理CapabilityAccessManager文件,需要使用管理员权限运行以脚本
+
+- /CapabilityAccessManager/clear.bat

windows_ip_blacklist/batch.bat

@@ -0,0 +1,88 @@
+@echo off
+chcp 65001 >nul
+setlocal enabledelayedexpansion
+
+:: 检查管理员权限
+net session >nul 2>&1
+if %ERRORLEVEL% neq 0 (
+    echo [错误] 请右键以管理员身份运行此脚本！
+    pause
+    exit /b 1
+)
+
+set "RULE_NAME=IP黑名单"
+set "LIST_FILE=%~dp0blacklist.txt"
+
+:: 检查黑名单文件是否存在
+if not exist "%LIST_FILE%" (
+    echo [错误] 未找到 %LIST_FILE%
+    echo 请在同目录下创建 blacklist.txt，每行一个IP
+    pause
+    exit /b 1
+)
+
+:: 读取IP列表，拼成逗号分隔
+set "IPLIST="
+set "COUNT=0"
+for /f "usebackq tokens=*" %%i in ("%LIST_FILE%") do (
+    set "line=%%i"
+    :: 跳过空行
+    if not "!line!"=="" (
+        :: 跳过#注释行
+        if not "!line:~0,1!"=="#" (
+            if defined IPLIST (
+                set "IPLIST=!IPLIST!,!line!"
+            ) else (
+                set "IPLIST=!line!"
+            )
+            set /a COUNT+=1
+        )
+    )
+)
+
+if not defined IPLIST (
+    echo [错误] blacklist.txt 中没有有效的IP地址
+    pause
+    exit /b 1
+)
+
+echo ========================================
+echo   Windows 防火墙 IP 黑名单批量设置
+echo ========================================
+echo.
+echo 规则名称: %RULE_NAME%
+echo IP 数量:   %COUNT%
+echo.
+
+:: 如果规则已存在，先删除
+netsh advfirewall firewall show rule name="%RULE_NAME%" >nul 2>&1
+if %ERRORLEVEL% equ 0 (
+    echo [1/2] 规则已存在，正在删除旧规则...
+    netsh advfirewall firewall delete rule name="%RULE_NAME%" >nul 2>&1
+    if !ERRORLEVEL! equ 0 (
+        echo       旧规则已删除
+    ) else (
+        echo       [警告] 旧规则删除失败
+    )
+) else (
+    echo [1/2] 规则不存在，跳过删除
+)
+
+:: 创建新规则
+echo.
+echo [2/2] 正在创建新规则...
+netsh advfirewall firewall add rule name="%RULE_NAME%" dir=in action=block remoteip=%IPLIST% protocol=any profile=any
+
+if %ERRORLEVEL% equ 0 (
+    echo.
+    echo ========================================
+    echo   封禁成功！共封禁 %COUNT% 个IP
+    echo ========================================
+) else (
+    echo.
+    echo [错误] 规则创建失败！
+    echo 可能原因：IP数量过多，请分批添加（每批建议不超过500个）
+)
+
+echo.
+pause

windows_ip_blacklist/blacklist.txt

@@ -0,0 +1,3 @@
+192.168.1.111
+192.168.1.112
+192.168.1.113

windows_ip_blacklist/single.bat

@@ -0,0 +1,8 @@
+@echo off
+setlocal enabledelayedexpansion
+set "IPLIST=blacklist.txt"
+for /f "usebackq delims=" %%i in ("%IPLIST%") do (
+    set "ip=%%i"
+    netsh advfirewall firewall add rule name="Block_!ip!" dir=in action=block remoteip="!ip!"
+)
+echo 完成。