Thanks for ur time it work
but you shall update the list in a good sample format
I added 3 lines in the sop control list file
Name1 PASSDICOM LocalAE
Name2 PASSDICOM RemoteAE
Name3 192.168.255.141 RemoteAE
My local conquest AE title is called PASSDICOM
If I don't have other RemoteAE, no other machine can read from my machine, except 141 . However, if someone knows my AE, they still can push files to my server PASSDICOM...
storescu -aet PASSDICOM -aec PASSDICOM 192.168.255.132 104 DICOM\*
which is not good.
I am going to check on the IPSec part from Windows, hopefully I can have more info on this issue.
Thanks for the hard work.
Ben Zhai