Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking for a software firewall for Windows as an alternative to the inbuilt one. Open source, free or commercial are on the table.

Most commercial software firewalls seem targeted at home users, and some such as ZoneAlarm don't seem to support Windows Server 2008. My requirements are relatively simple:

  • I can reject traffic for port X on NIC 1, but allow it on NIC 2
  • Works on Windows Server 2008
  • When I install it, it shouldn't disable RDP, or else I have a long trip to the data center :)

My basic goal is that from the internet, all traffic for ports other than port 80 or VPN should be rejected, but once connected via VPN all traffic will be allowed.

share|improve this question
Is there a special reason you don't want to use the Windows Server built-in's firewall? – splattne Aug 10 '09 at 13:58
@splattne to be honest, I find it very confusing and with too much noise :) Mostly I can't figure out how to bind policies to specific NIC's – Paul Stovell Aug 10 '09 at 13:59
Just bind the policy to the right networks (the ones on the nic you want to bind to)? – Oskar Duveborn Aug 10 '09 at 15:21
are you looking for software only, no hardware? – Keith Aug 10 '09 at 17:36
For what it's worth - I don't believe it's possible to bind different policies to different interfaces in Microsoft's built-in firewall. The most restrictive policy is applied to all interfaces. – Dscoduc Aug 10 '09 at 18:50
up vote 0 down vote accepted

You might want to try wipfw - the Windows port of ipfw (from BSD).

share|improve this answer

Check out Kerio's WinRoute Firewall. Windows Server 2008 is supported. It's a commercial product, but reasonably priced.

share|improve this answer
I installed this on my server and the first thing it did was disable the RDP connection :-( – Paul Stovell Aug 11 '09 at 11:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.