Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a windows 2008 server and lately we have started seeing a lot of 5152 Events logged in the server (Windows Filtering Platform blocked a packet).

We have an inbound rule configured to allow connections to the port which was working fine earlier. I'm not sure what changed lately. But this doesn't make any sense.

The packet is dropped even when windows firewall is disabled. What am I missing?

share|improve this question
Is the packet actually dropped, or is it incorrectly logged as dropped? If it's really being dropped, what Shane said. – Katherine Villyard May 31 '13 at 13:32
I believe I have encountered a similar issue, did you get any resolution on this? My question is -… – Matthew Abbott May 5 '15 at 13:30

Filtering platform can be used by more than just windows firewall; I'd check if your host security (antivirus) software has a firewall feature enabled.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.