Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a windows 2008 server and lately we have started seeing a lot of 5152 Events logged in the server (Windows Filtering Platform blocked a packet).

We have an inbound rule configured to allow connections to the port which was working fine earlier. I'm not sure what changed lately. But this doesn't make any sense.

The packet is dropped even when windows firewall is disabled. What am I missing?

share|improve this question
    
Is the packet actually dropped, or is it incorrectly logged as dropped? support.microsoft.com/kb/969257 If it's really being dropped, what Shane said. –  Katherine Villyard May 31 '13 at 13:32

1 Answer 1

Filtering platform can be used by more than just windows firewall; I'd check if your host security (antivirus) software has a firewall feature enabled.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.