I'm running Windows 2008 R2 and I have IIS7/MySQL hosting several websites. However, I've recently been having seemingly random connection errors, perhaps one out of 50 times.
I took a look at the event viewer and there are lots of blocked packets to post 80 from many different IPs at the time of the problems, including my own (event viewer log attached at bottom of post).
It looks like WFP is blocking some legitimate requests, but I've set up the firewall to allow all port 80 web traffic connections... so how can they be blocked?
LOG:
The Windows Filtering Platform has blocked a packet.
Application Information:
Process ID: 0
Application Name: -
Network Information:
Direction: Inbound
Source Address: xxx.xxx.xxx.xxx
Source Port: 57578
Destination Address: xxx.xxx.xxx.xxx
Destination Port: 80
Protocol: 6
Filter Information:
Filter Run-Time ID: 74587
Layer Name: Transport
Layer Run-Time ID: 13