This is a new question but similar to this previous one.

I've inherited the management of a Windows 2012 Server (not R2) and I'm unable to get a response from any ports above 6000. I have services on 8098, 41200 and 42222. Netstat shows they are listening. There is no positive rejection. Client requests just timeout.

I've tried with the firewall off for all profiles and with rules to open all ports & applications etc I've ensured NAP is disabled. I've removed the Direct Access role that the customer had installed but didn't need and have removed the policies that this role installed. I've done a Base Filtering Engine reset by removing the policy keys in the registry and then doing a "netsh advfirewall reset" followed by a reboot.

I haven't yet tried turning off the BFE service completely but I need to be on site to do that as I'll lose connection when the dependent Windows Firewall service stops.

I've spent hours and hours on this and cannot find the cause or any sensible suggestions for what else it could be. I've seen other posts elsewhere about problems with ports above 6000 but they don't lead to anything useful.

Is there something specific about TCP ports > 6000 ?

  • Can you confirm that if you move these services to ports below 6000, eg 5996-9 then all works as expected? Dec 15 '15 at 13:27
  • I am unable to move them down as they are hard-coded in the 3rd party software. But I did set up some dummy IIS web sites below and above 6000 and got no responses from the ones above 6000.
    – Trichromic
    Dec 16 '15 at 0:13
  • I have an interesting update on this. I found that if I stop the Base Filtering Engine service (and thus its dependent Windows Firewall service, PolicyAgent and IKEEXT services) these ports start responding. Strangely, if I start them again, the ports still respond. If I reboot, they stop again. I tried stopping the dependent services one by one but that didn't help. A script with a quick stop/start of the BFE and Windows Firewall just after reboot is currently the work-around solution.
    – Trichromic
    Dec 16 '15 at 0:20
  • shot in the dark, but have you checked this article? blogs.technet.com/b/askds/archive/2008/10/29/… Dec 16 '15 at 5:15
  • Does this happen on a brand new clean install? related: serverfault.com/questions/488999/… Dec 16 '15 at 10:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.