`netsh advfirewall firewall add rule name="Allow f...
# general
r
netsh advfirewall firewall add rule name="Allow from <peer private addr>" dir=in action=allow protocol=ANY remoteip=<peer private addr>
?