<div class="content"><p> </p><p>The RRPC_FWAddFirewallRule method requests the server to add
the specified firewall rule in the policy contained in the policy store that is
referenced by the handle specified in the <i>hPolicyStore</i> parameter.</p><dl>
<dd>
<div><pre> ULONG RRPC_FWAddFirewallRule(
   [in] FW_CONN_HANDLE rpcConnHandle,
   [in] FW_POLICY_STORE_HANDLE hPolicyStore,
   [in] PFW_RULE2_0 pRule
 );
</pre></div>
</dd></dl><p><b>rpcConnHandle: </b>This parameter is an <span><a href="d891304d-92d8-4f9f-9e60-a1f02b28ae30#gt_8a7f6700-8311-45bc-af10-82e10accd331" data-linktype="relative-path">RPC</a></span>
binding handle that connects to the RPC interface of the Firewall and Advanced
Security Protocol.</p><p><b>hPolicyStore: </b>This input parameter is an <span><a href="88f6ea4a-a946-4747-bb93-f142f1760752" data-linktype="relative-path">FW_POLICY_STORE_HANDLE</a></span>
data type. The data type MUST contain an opened policy store handle that is
successfully opened by using the RRPC_FWOpenPolicyStore (Opnum 0) method. The
handle MUST have read/write access rights.</p><p><b>pRule: </b>This parameter represents the firewall
rule that the client wants to add to the store. The rule MUST be a valid rule,
as specified in the definition of the <span><a href="af151922-b092-4e5c-9b69-4dca6b6d2ffc" data-linktype="relative-path">FW_RULE2_0</a></span> data
type.</p><p><b>Return Values: </b>The method returns 0 if
successful; if it fails, it returns a nonzero error code. The field can take
any specific error code value, as specified in <span><a href="../ms-erref/1bc92ddf-b79e-413c-bbaa-99a5281a6c90" data-linktype="relative-path">[MS-ERREF]</a></span>.
The following return values are common.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Return value/code</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>0x000000B7</p>
  <p>ERROR_ALREADY_EXISTS</p>
  </td>
  <td>
  <p>The specified rule has a rule ID that already exists
  in the specified store.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000032</p>
  <p>ERROR_NOT_SUPPORTED</p>
  </td>
  <td>
  <p>The specified store does not support this method; the
  store might be read-only.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000005</p>
  <p>ERROR_ACCESS_DENIED</p>
  </td>
  <td>
  <p>The <i>hPolicyStore</i> handle was not opened with
  read/write access rights. The error is also returned if the client does not
  have the required credentials to call the method.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000057</p>
  <p>ERROR_INVALID_PARAMETER</p>
  </td>
  <td>
  <p>A parameter of this method is incorrect, or is
  required and not specified. This error can be returned because:</p>
  <ul><li><p><span><span>  
  </span></span><span>The <i>pRule</i> object did not
  pass the firewall rule validations that are specified in the definition of
  the <span><a href="8c008258-166d-46d4-9090-f2ffaa01be4b" data-linktype="relative-path">FW_RULE</a></span> data
  type.</span></p>
  </li><li><p><span><span>  
  </span></span><span>One of the required values is not
  specified.</span></p>
  </li><li><p><span><span>  
  </span></span><span>A policy store does not support
  rules with profile conditions other than ALL profiles.</span></p>
  </li><li><p><span><span>  
  </span></span><span>The <b>wszLocalApplication</b>
  field of the rule contains a string that was determined to be an invalid
  path.<a id="Appendix_A_Target_33"></a><a aria-label="Product behavior note 33" href="1da2ee70-a6ae-4f76-b08f-fdc25c77d8a0#Appendix_A_33" data-linktype="relative-path">&lt;33&gt;</a></span></p>
  </li></ul></td>
 </tr></tbody></table>
</dd></dl><p><b>Exceptions Thrown:</b> No exceptions are thrown
except those that are thrown by the underlying RPC protocol, as specified in <span><a href="../ms-rpce/290c38b1-92fe-4229-91e6-4fc376610c15" data-linktype="relative-path">[MS-RPCE]</a></span>.
If any lower-layer errors are reported by RPC exception, this exception is converted
to an error code and reported to higher-layer protocols via the return value.</p><p>This method adds a firewall rule to the firewall linked list
of the memory representation of the store being modified. It also writes
through and saves the rule in disk. If called on an online store, the firewall
rule is also enforced.</p><p>The server MUST validate that the client is authorized to
perform the requested operation (as defined in section <span><a href="b0c93352-8371-4d63-abca-b0cc8dbcc3d7" data-linktype="relative-path">3.1.4</a></span>)
before executing this method.</p></div>