Questions tagged [windows-firewall]
"Windows Firewall" refers to the built in client firewall utility that ships with the Windows operating system. (It was previously named the Internet Connection Firewall.) By default, all Windows operating systems since Windows XP and Windows Server 2003 have shipped with this client.
27
questions
14
votes
1
answer
3k
views
How can I back up my recommendation to NOT disable the Windows Firewall service?
I know from direct personal experience that disabling the Windows Firewall service on post-XP systems can lead to all sorts of networking problems, and that the proper way of disabling it is by ...
27
votes
4
answers
81k
views
Windows Advanced Firewall: What does "Edge Traversal" mean?
this should be a really simple one:
In Advanced Windows Firewall on Windows Server 2008+, Properties > Advanced, what does "Edge Traversal" mean?
I Googled it, of course, and was unable to come up ...
7
votes
4
answers
23k
views
How do I disable the firewall on a single interface in Windows 7?
We're using openvpn to provide access back from XP to work. We use AD policies to ensure the XP firewall is up when off the domain and down when on the domain. With openvpn, you end up with a new ...
5
votes
8
answers
76k
views
Active FTP client blocked by Windows Firewall on Windows 7
I have an application that runs as a service and contains an FTP client. It needs to connect to an FTP server that only supports Active FTP. When I attempt to get a list of files or download a file, ...
3
votes
1
answer
3k
views
Windows Filtering Platform dropping SQL Server connections
I've been investigating connection issues between my web server (Web01) and a database server (Database01). My current setup:
Web01 - two NICs, one external (firewalled), one internal (not firewalled)...
10
votes
1
answer
12k
views
Do new Windows firewall rules affect currently open connections?
If I added a rule to windows firewall that blocked an ip or port currently used by an open connection, does that rule take effect immediately or only after the connection were closed?
I.e, If I have ...
7
votes
1
answer
6k
views
How do you disable "stealth mode" on Windows Server 2008?
After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make.
...
7
votes
1
answer
10k
views
Can firewall block packets visible in Wireshark?
Wireshark shows that an RTP package is received on a PC.
Is it possible that despite detection by Wireshark, something (firewall?) is still prevent the application listening to the required port on ...
6
votes
1
answer
2k
views
Can I use Win 2k8 R2 as an IPSEC client?
I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN.
I tried to set it up in Windows Firewall with Advanced Security, but the connection doesn'...
4
votes
1
answer
20k
views
How can I allow RDP access to a Windows 2008R2 server from one IP?
I've been trying to secure RDP to a new Windows 2008R2 server (using Windows Firewall) by only allowing RDP traffic from one IP address.
Under the "Computers" tab, it seems I can only allow user or ...
4
votes
1
answer
36k
views
What are differnet between local port and remote port of firewall in Windows 2016 server?
I use MS SQL 2017 Express Database server in my Windows 2016 server.
I hope to expose MS SQL 2017 Express Database server to the internet, so I need open 1433 port in firewall.
But I find there are ...
4
votes
0
answers
3k
views
Windows Filtering Platform blocking packets for legitimate traffic
I am running into an issue with traffic from a webapp server to a database server being blocked or filtered. I have allowed inbound and outbound traffic on the needed ip and port with a firewall rule, ...
4
votes
2
answers
2k
views
Server is listening in Port 110 and I can't find any way to disable or block it
I have a Windows 2012 R2 server used as web server, with ports for web (80, 443, and 8080) open for public sites hosted on it. Doing some security checks on it, I found it's listening on port 110 too:
...
3
votes
2
answers
6k
views
AWS Override VPC DHCP - Additional Option Sets for RRAS VPN Clients
I am trying to run a RRAS VPN server that pulls from a windows DHCP server running on the same box. I am finding that the AWS DHCP is getting hit first with the DHCP request and it provides invalid ...
3
votes
1
answer
5k
views
Firewall predefined rule property cannot be modified
Using a stand alone Windows Server 2012 Standard edition (no Active Directory),
I Tried to establish a simple remote desktop with a custom port number, but could not modify the port number in the ...
3
votes
2
answers
1k
views
Why is file sharing over internet still working, despite all firewall exceptions for filesharing being disabled?
Every exception in my windows server firewall that starts with "File and Printer Sharing" is disabled (ordered by name, so that includes domain, public (active), and private profiles).
The Network ...
3
votes
1
answer
11k
views
What firewall ports need to be open for Active Directory?
I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
3
answers
11k
views
Windows 2008 R2 Server with 2 ip address, how to only enable RDP to one address
As the title says we have a Windows 2008 R2 Server with 2 IP address. Currently, we can connect via RDP to both IP addresses, however, we want to block/disable RDP connections that attempt to connect ...
2
votes
4
answers
5k
views
AWS Security Groups vs Windows Firewall
Is it considered best practice to disable the Windows Firewall on an Amazon EC2 instance, and control traffic only via EC2 Security Groups?
If I open a port on the server firewall, and then open the ...
2
votes
0
answers
1k
views
Safari cannot open the page because the server stopped responding
I am running Windows Server 2012 R2, and have 2 web pages running via IIS.
The 1st one is on port 80 for HTTP, and the 2nd one is on port 16552 for an API interface.
I have opened all the ...
1
vote
1
answer
914
views
Windows network shares still visible (and accessible) with "file and printer sharing" deactivated
I just migrated a windows server VPS to a new one (Windows Server 2012 R2) and realized that even though "Turn off file and printer sharing" is selected for all available network profiles (Public/...
1
vote
1
answer
482
views
How do I open the firewall for my monitoring software to access WMI?
I have a SQL Server machine and a monitoring machine, and I need the monitoring software on the monitor host to be able to read the WMI data on the SQL Server host. (The monitoring software is ...
1
vote
4
answers
169
views
Do I need a hardware firewall for Win 2003?
We have had a Win 2003 server at a co-lo for a while. It is used as a web server and has a very cheap hardware firewall between it and the internet. Ports 3389 and 80 are the only ones forwarded to ...
1
vote
4
answers
7k
views
Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how?
I want to force the in-house machines here to have their firewall disabled so I can manipulate them with scripts. Trying to do it with GPO, but it doesn't result in a disabled and greyed out firewall ...
0
votes
2
answers
6k
views
How to configure different firewall rules on 2 different network cards in Windows 2008?
On Windows 2003 Server, we have 2 network cards and it's easy to open different ports to the different network cards.
I'm trying to do the same on a Windows 2008 Server, I've discovered Windows ...
0
votes
1
answer
3k
views
Disable firewall for all network profiles on Windows Server 2008 R2 through GPO
I've been trying to disable firewall on a number of Windows Server 2008 R2 machines for all network profiles using GPO, but it seems to be working only for domain profile so far.
In Group Policy ...
0
votes
1
answer
725
views
Binding IIS site to alternate IP not accessible remotely - OK locally - Windows 2008 R2
I have a Windows 2008 R2 server with multiple IPs (4 in total) associated with it. When I bind an IIS web site to one of the alternate ones I can browse too it locally but when I try to do it remotely,...