Questions tagged [windows-firewall]

"Windows Firewall" refers to the built in client firewall utility that ships with the Windows operating system. (It was previously named the Internet Connection Firewall.) By default, all Windows operating systems since Windows XP and Windows Server 2003 have shipped with this client.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Windows firewall outgoing rule exception not working

I set custom outbound firewall rule on Windows Server 2019 which deny all outgoing traffic on 192.168.2.0/24. The rule is working for all until I set an exception in "Local principal/Exceptions". When ...
0
votes
0answers
9 views

All Firewall Rules deployed from Group Policy show as “Extra Registry Settings”?

Every time a new Firewall rule is added via Group Policy, it shows on the client as "Extra Registry Settings". Could someone please confirm if this is how it should show? I am staring to think that it ...
5
votes
1answer
83 views

Hardening a file-serving Windows Server 2019 instance

I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
0
votes
0answers
20 views

Windows Firewall blocking all connections after sysprep

I've applied CIS Windows Server 2019 Benchmark to a machine and then used sysprep to make it into a template. The problem is, after reboot after sysprep, or making a new image from the template, ...
0
votes
0answers
11 views

Converting an iptables rule to Windows Server Firewall

anyone knows how to write the equivalent of this rule in Windows firewall? iptables -t nat -A POSTROUTING --destination 0.0.0.0/0 -j SNAT --to <IP>
0
votes
1answer
22 views

Windows Server 2019 IP Group for Firewall

I have a couple of Windows Server 2016 and 2019 boxes and wish to add some simple rules to the Windows Defender Firewall (e.g. RDP Port, FTP Ports, etc.), allowing a group of IP addresses. I'd prefer ...
-1
votes
2answers
36 views

Why Windows 10 Blocks some LAN IPs (192.168..)?

- Summarize the problem: Windows 10 does not allow visiting my local LAN IPs (192.168.1.0/24), and some domains (that are defined in my hosts file). Error shows in all browsers (e.g. form chrome: ...
0
votes
0answers
22 views

Allow computers in office to ping Windows VPN clients

We are using OpenVPN to allow employees to connect to the office network. The office uses 172.20.1.0/24, the VPN clients use 10.8.0.0/24. Our VPN server is a QNAP NAS. When connected, clients can ...
0
votes
0answers
14 views

Firewall is causing a file download to fail halfway through

I have a strange issue which I belive is related to the Windows firewall settings. I have a client application that tries to GET a rather large XML file (around 13k lines). When the firewall is off, ...
0
votes
0answers
42 views

Not able to ping the host machine (or any other machine on the network) from the linux docker container

I am using Docker Desktop Version 2.0.0.3 (31259) on my windows server 2016 machine. From the host machine(say A), I can ping to any other machine in the network(say B), but when I run a linux ...
0
votes
0answers
14 views

Server to server connection with wf.msc

I have a box with 2019 Windows Datacenter in one domain, and I have Windows Datacenter 2019 in a completely different domain - I am looking for the best way to connect the two and keep the data secure....
0
votes
0answers
38 views

new azure port will not open

Some time back I created an Azure VM and needed to open some ports. I did so by creating a security group and added the appropriate inbound rules to open the ports. Also I created an inbound rule in ...
1
vote
0answers
25 views

WS2016 Firewall: Still blocking program from sending packets after creating in/outbound rules for said application

Starting config: Firewall has been set to block both in/outbound traffic by default. Minimal Core Networking rules have been enabled for NIC to get auto configured. Every other rule is disabled. So ...
0
votes
1answer
2k views

What are differnet between local port and remote port of firewall in Windows 2016 server?

I use MS SQL 2017 Express Database server in my Windows 2016 server. I hope to expose MS SQL 2017 Express Database server to the internet, so I need open 1433 port in firewall. But I find there are ...
0
votes
0answers
76 views

Server 2019 - restrict port 3389

There seem to be plenty of explanations on how to restrict port 3389 to certain IP addresses - open Firewall and the 3389 rule. Add required IP addresses to Remote IP addresses under the scope tab and ...
0
votes
0answers
53 views

SVCHost - Enable its services for Network Traffic in a restricted firewall - Problems with services such as BITS

I have setup the windows firewall with the configuration to block all traffic (In and Out) except if having a matching rule to allow it. I am having issues to allow some services that run through ...
0
votes
1answer
153 views

Virtual network between Hyper-V host and guest VM is blocked by firewall because marked as unidentified

I have the following setup: Windows machine with Hyper-V activated Hyper-V VM under CentOS 7 using the default virtual switch as an interface between host and guest The virtual switch has 172.24.255....
0
votes
0answers
26 views

Windows 10 keeps claiming the firewall is turned off… then on… then off… then

I have a Dell laptop with Windows 10 1909 (I think) installed. Domain joined. Every 1-2 minutes I get a notification stating that the firewall has been turned off. When viewing the Win10 Defender ...
0
votes
0answers
22 views

Forward rules in Windows Firewall

I installed OpenVPN server on Windows 10 machine and enabled routing by setting IPEnableRouter to 1 in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters. I would like to prevent ...
3
votes
1answer
593 views

Windows Server 2016 - How to change TCP Timeout settings on open port [closed]

In Windows Server 2016: I ran a NodeJS application on port 8080 and made the port available to the public internet. (by allowing inbound TCP connections over the port 8080 in the firewall) GET ...
0
votes
0answers
26 views

Event ID 5156 being logged on every packet received

We have several computers (W10 and W2012) under an AD domain. We have found out that in the servers an event ID 5156 is logged for every single network packet received. As far as we can understand ...
0
votes
0answers
35 views

Correct way to allow connection from Hyper-v guest to an application on host machine

What is the correct way to allow connection from guest to an application running on host machine? Example setup: some application running on my Win 10 host machine, say NodeJS app on port 4400 guest ...
2
votes
0answers
152 views

Windows Firewall: allow only certain DNS servers

In my organization (which uses two network DNS servers and a local DNS resolver per laptop) I want to restrict DNS requests to only 127.0.0.1 192.168.10.201 192.168.20.2 1.1.1.1 1.0.0.1 and block ...
2
votes
3answers
361 views

How re-enable Windows Firewall when the service has been stopped and disabled without cutting yourself out?

As every Windows system administrator should know in 2019, the "Windows Firewall" service is a critical component of the Windows network stack, and it should never, ever be stopped end disabled; the ...
0
votes
0answers
46 views

BITS Forece Priority Foreground for all traffic?

I have a Windows Server 2016 that is having issues getting SCCM updates. The issue lies in the firewall on the server being disabled which causes the BITS traffic to be blocked. I do not want to ...
1
vote
2answers
275 views

Create Azure VM with Windows Firewall ports open?

I'm working on a Powershell script that will automate setting up an Azure VM, adding it to my Active Directory domain, and setting up a number of other settings. The idea is to be able to spin up and ...
1
vote
2answers
102 views

Server 2016 Domain Controller firewall configuration

I have an environment with 12 VM's all running Windows Server 2016. One is a domain controller, all others joined to the domain. When I login via RDP to any of the computers it takes 2+ minutes. Most ...
0
votes
0answers
27 views

Client inbound ports needed in standard domain environment?

Excluding ephemeral ports, which inbound client ports must be open in a standard domain environment for average/normal communication to occur? Assume the following: Domain: Windows Server 2016 ...
1
vote
1answer
326 views

Allow/Block specific RPC interface UUIDs using the Windows Firewall

Is it possible to block/allow certain RPC UUIDs using the Windows Firewall? For example, Active Directory domain controller replication occurs using RPC over TCP via the drsuapi and dsaop RPC ...
0
votes
0answers
21 views

Windows Firewall Log: Add header for Logging

in Windows Firewall you can log the DROPs or ALLOWs into a log file. That works for me fine. The outputed fields are: Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags ...
1
vote
1answer
2k views

Windows Server 2019 firewall advanced configuration

I have two windows 2019 servers A and B. Both have Active Directory and DNS roles installed. This setup is only used for directory service authentication by some php based web applications on port 636....
0
votes
1answer
2k views

Domain Join - The Network Path was not Found

I am unable to join PC's or servers to my domain and am unable to determine the cause... What have I tried? - Disabled Domain Windows Firewall; Changed Network Adapter from Public to Domain, Changed ...
0
votes
0answers
1k views

Windows 2012 R2 Firewall Rule apply only after reboot

I have a Windows Server 2012 R2 server with firewall activated and inbound connections in blocked by default. When i create a rule A to open port 5060 UDP to any source and then create a rule B to ...
0
votes
1answer
441 views

What port/s does VMware Workstation use to connect to a vCenter server?

We have a vCenter Server running in Windows. I am trying to connect to the vCenter server in VMware Workstation 12 via File -> Connect to Server With the Windows Firewall on, the connection times ...
0
votes
1answer
781 views

Can't Open Ports Google Cloud VM Instance

I'm trying to get TightVNC to remote into my Server 2016 instance. I have the VNC Server listening on 5901. I've created a firewall rule in the instance itself, and on my VPC network firewall rules ...
-2
votes
2answers
186 views

Windows Server multiple ip issue

One windows server 2016 running on some ip address 1.2.3.0. It has Apache server on port 80, DNS Server and running MySql server and so on and connecting through RDP client. My requirement is to add ...
-1
votes
2answers
2k views

Port forwarding not working on Google Cloud

I've created a rule in google cloud to allow inbound connections, but the port won't open. Can't connect through telnet or online port checkers. Can anyone tell me what could the issue be? I ...
1
vote
0answers
623 views

Windows Firewall protected network connections blocked by local group policy

I have a couple of Windows 2008R2 servers running as stand-alones (that is, not connected to a Domain). In Windows Firewall with Advanced Security, I'm trying to unprotect a local network connection ...
3
votes
1answer
764 views

How to stop Windows Filtering Platform blocking ICMP packets for legitimate RDP traffic over L2TP tunnel?

RDP via Windows 2008 L2TP to Windows 10 Pro did never work flawless. The first attempt in September 2018 needed the client Cord.app to be replaced with Royal TSX on OS X 10.9.5. The remote Win10 box ...
-1
votes
3answers
418 views

Adding IP Addresses to RDP firewall rule

Please understand that I have been through all the posts regarding this issue and my issue has not been resolved which is as follows: I have a brand new installation of Server 2008 R2 SP1, with all ...
2
votes
1answer
1k views

Connection refused for Java HTTP Server running on localhost

How would you investigate the following issue? On a specific server; any HTTP-Requests sent to a Java Server running on localhost fails with "Connection refused". (See the Java code here) In the ...
3
votes
1answer
595 views

Block an application from accessing the network, except for a single IP address

How would I go about preventing a specific .exe from accessing any network (TCP) resources, with the exception of 1 or 2 IP addresses? Can it be done with Windows Firewall (netsh or UI) and/or IPSec? ...
1
vote
0answers
892 views

Safari cannot open the page because the server stopped responding

I am running Windows Server 2012 R2, and have 2 web pages running via IIS. The 1st one is on port 80 for HTTP, and the 2nd one is on port 16552 for an API interface. I have opened all the ...
-2
votes
1answer
2k views

geoip block/ mass ip blocks in windows firewall [closed]

i got issue with ransomware attacks day and night from Russia/Ukraine... even with secure rdp some of them get passes now and then and make me suffer... so i want to block geo block whole Russia/...
0
votes
2answers
426 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
2
votes
1answer
2k views

Windows Firewall - difference between disable and “block”

In "Windows Firewall with advanced security", what is the difference between disabling a rule and setting it to "block traffic"? Besides knowing the difference, in my case I want to diminish the ...
4
votes
2answers
696 views

Server is listening in Port 110 and I can't find any way to disable or block it

I have a Windows 2012 R2 server used as web server, with ports for web (80, 443, and 8080) open for public sites hosted on it. Doing some security checks on it, I found it's listening on port 110 too: ...
0
votes
1answer
537 views

IIS on AWS Windows Server 2016 not serving to external clients

I created an AWS Windows Server 2016 instance and also allocated an elastic IP address to it. Server's running fine and I can RDP into it. I also installed IIS on it and ensured that it is running. ...
2
votes
1answer
395 views

Group Policy setting to activate Windows Firewall when not on Business Domain

I've been trying to figure out GPO settings for a couple of days and cannot figure out how to apply a filter of some sort to Windows Firewall to turn it ON when any employee is not on the domain (10.0....
2
votes
2answers
2k views

Windows Firewall: Apply local firewall rules

I have an environment where we have a GPO which we have set on all profiles to have the setting: Apply local firewall rules: No I've confirmed that the GP is applied successfully by using gpresult/...

1
2 3 4 5
9