Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make.

Unfortunately, Windows 2008 R2 uses the so-called "stealth mode" by default and I've found no obvious way to disable it correctly.

In comments below the Technet article, there is a link to the following msdn article that shows a key or struct of some sort that might disable it. But I was unable to find any key with "stealth" in the registry. Anyway, a second comment indicates this might not work anyway:

"Certain elements of the filtering platform are always active, even when the firewall is > disabled, including Stealth Mode. There is no supported way to disable stealth mode."

So does "Stealth Mode" do anything other than reject packets? Does anyone know how to disable stealth mode?

share|improve this question

1 Answer 1

up vote 5 down vote accepted

Locate each of the following keys in the registry:

HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile
HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile
HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile
HKLM\Software\Policies\Microsoft\WindowsFirewall\StandardProfile

Add or edit the following value: DisableStealthMode(DataType: REG_DWORD), and set it to 0x00000001

Reference: http://msdn.microsoft.com/en-us/library/ff720058(v=prot.10).aspx

share|improve this answer
1  
Could you add a reference any documentation concerning this method? –  Wesley Feb 13 '12 at 2:55
    
@WesleyDavid My apologies, reference added –  Mathias R. Jessen Feb 13 '12 at 3:02
1  
Had to add WindowsFirewall and subkeys since they didn't exist yet. Otherwise, everything worked great. I tested in broser by trying to access the sever IP with a random port. Thanks so much! –  labyrinth Feb 20 '12 at 0:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.