Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On my Windows Server 2003 server, all incoming connections are dropped. I can see them getting in using Wireshark, but even a single ping from another computer fails.

All locally initiated connection work fine (I'm asking from the server). This server is the DC/DHCP/DNS/File server, so computer clients are in the dark.

I've run varius antivirus and removal tools without any luck. The Windows Firewall is disabled.

I'm wild-guessing at some virus/worm.

How can i check why these incoming ICMP/TCP SYN/etc are dropped?
Anyone has any knowledge about such situations?


share|improve this question
My two bits: Don't be browsing the web from a server. – Iszi Jan 31 '11 at 19:43
Was a messed up VPN client. Windows is so opaque. Closing. – Benoît Dec 4 '11 at 16:45

Is this server in a DMZ? Besides the above answers (windows firewall and IPSEC issues) the most obvious other cause would be an external firewall blocking traffic. I assumed you've tested from another device in the same subnet?

share|improve this answer

A more likely culprit than virus/worm is the software that ostensibly prevents viruses and worms from getting on the server in the first place. On my servers, I have seen more weird behaviors from badly behaving AV software than I have actual viruses.

Also, really bad NIC drivers can do this sometimes. Broadcom has had some real clunkers along the way.

share|improve this answer

I had a similar experience a few years back and the problem turned out to be Windows firewall, even though it was supposedly disabled. The solution, after a great deal of trail and error, as well as head scratching, was to enable the firewall, make a change to it (I simply added a port exception), reboot and finally disable the firewall again. I never did find out just why it behaved this way as the machine was decommissioned not long after that.

share|improve this answer

I've run into this when the IPSec service failed to start on server 2003. If it's disabled it will work fine but when it fails to start all network traffic is dropped.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.