Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [windows-firewall]

"Windows Firewall" refers to the built in client firewall utility that ships with the Windows operating system. (It was previously named the Internet Connection Firewall.) By default, all Windows operating systems since Windows XP and Windows Server 2003 have shipped with this client.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

Windows 10 keeps claiming the firewall is turned off… then on… then off… then

I have a Dell laptop with Windows 10 1909 (I think) installed. Domain joined. Every 1-2 minutes I get a notification stating that the firewall has been turned off. When viewing the Win10 Defender ...
0
votes
0answers
15 views

Forward rules in Windows Firewall

I installed OpenVPN server on Windows 10 machine and enabled routing by setting IPEnableRouter to 1 in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters. I would like to prevent ...
3
votes
1answer
67 views

Windows Server 2016 - How to change TCP Timeout settings on open port [closed]

In Windows Server 2016: I ran a NodeJS application on port 8080 and made the port available to the public internet. (by allowing inbound TCP connections over the port 8080 in the firewall) GET ...
0
votes
0answers
15 views

Event ID 5156 being logged on every packet received

We have several computers (W10 and W2012) under an AD domain. We have found out that in the servers an event ID 5156 is logged for every single network packet received. As far as we can understand ...
0
votes
0answers
24 views

Correct way to allow connection from Hyper-v guest to an application on host machine

What is the correct way to allow connection from guest to an application running on host machine? Example setup: some application running on my Win 10 host machine, say NodeJS app on port 4400 guest ...
2
votes
0answers
53 views

Windows Firewall: allow only certain DNS servers

In my organization (which uses two network DNS servers and a local DNS resolver per laptop) I want to restrict DNS requests to only 127.0.0.1 192.168.10.201 192.168.20.2 1.1.1.1 1.0.0.1 and block ...
2
votes
3answers
153 views

How re-enable Windows Firewall when the service has been stopped and disabled without cutting yourself out?

As every Windows system administrator should know in 2019, the "Windows Firewall" service is a critical component of the Windows network stack, and it should never, ever be stopped end disabled; the ...
0
votes
0answers
20 views

BITS Forece Priority Foreground for all traffic?

I have a Windows Server 2016 that is having issues getting SCCM updates. The issue lies in the firewall on the server being disabled which causes the BITS traffic to be blocked. I do not want to ...
1
vote
2answers
66 views

Create Azure VM with Windows Firewall ports open?

I'm working on a Powershell script that will automate setting up an Azure VM, adding it to my Active Directory domain, and setting up a number of other settings. The idea is to be able to spin up and ...
1
vote
2answers
69 views

Server 2016 Domain Controller firewall configuration

I have an environment with 12 VM's all running Windows Server 2016. One is a domain controller, all others joined to the domain. When I login via RDP to any of the computers it takes 2+ minutes. Most ...
0
votes
0answers
26 views

Client inbound ports needed in standard domain environment?

Excluding ephemeral ports, which inbound client ports must be open in a standard domain environment for average/normal communication to occur? Assume the following: Domain: Windows Server 2016 ...
1
vote
1answer
176 views

Allow/Block specific RPC interface UUIDs using the Windows Firewall

Is it possible to block/allow certain RPC UUIDs using the Windows Firewall? For example, Active Directory domain controller replication occurs using RPC over TCP via the drsuapi and dsaop RPC ...
0
votes
0answers
13 views

Windows Firewall Log: Add header for Logging

in Windows Firewall you can log the DROPs or ALLOWs into a log file. That works for me fine. The outputed fields are: Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags ...
0
votes
0answers
70 views

Windows Firewall drops packets, but don't log it

I have a FTP Server on a virtual machine, which is correctly redirected through the NAT. But the windows firewall drops the packet, without logging it. The logging is enabled, and the firewall logs ...
0
votes
1answer
962 views

Windows Server 2019 firewall advanced configuration

I have two windows 2019 servers A and B. Both have Active Directory and DNS roles installed. This setup is only used for directory service authentication by some php based web applications on port 636....
0
votes
1answer
1k views

Domain Join - The Network Path was not Found

I am unable to join PC's or servers to my domain and am unable to determine the cause... What have I tried? - Disabled Domain Windows Firewall; Changed Network Adapter from Public to Domain, Changed ...
0
votes
0answers
475 views

Windows 2012 R2 Firewall Rule apply only after reboot

I have a Windows Server 2012 R2 server with firewall activated and inbound connections in blocked by default. When i create a rule A to open port 5060 UDP to any source and then create a rule B to ...
0
votes
1answer
284 views

What port/s does VMware Workstation use to connect to a vCenter server?

We have a vCenter Server running in Windows. I am trying to connect to the vCenter server in VMware Workstation 12 via File -> Connect to Server With the Windows Firewall on, the connection times ...
0
votes
1answer
403 views

Can't Open Ports Google Cloud VM Instance

I'm trying to get TightVNC to remote into my Server 2016 instance. I have the VNC Server listening on 5901. I've created a firewall rule in the instance itself, and on my VPC network firewall rules ...
-2
votes
2answers
151 views

Windows Server multiple ip issue

One windows server 2016 running on some ip address 1.2.3.0. It has Apache server on port 80, DNS Server and running MySql server and so on and connecting through RDP client. My requirement is to add ...
-1
votes
2answers
1k views

Port forwarding not working on Google Cloud

I've created a rule in google cloud to allow inbound connections, but the port won't open. Can't connect through telnet or online port checkers. Can anyone tell me what could the issue be? I ...
1
vote
0answers
351 views

Windows Firewall protected network connections blocked by local group policy

I have a couple of Windows 2008R2 servers running as stand-alones (that is, not connected to a Domain). In Windows Firewall with Advanced Security, I'm trying to unprotect a local network connection ...
3
votes
1answer
499 views

How to stop Windows Filtering Platform blocking ICMP packets for legitimate RDP traffic over L2TP tunnel?

RDP via Windows 2008 L2TP to Windows 10 Pro did never work flawless. The first attempt in September 2018 needed the client Cord.app to be replaced with Royal TSX on OS X 10.9.5. The remote Win10 box ...
-1
votes
3answers
115 views

Adding IP Addresses to RDP firewall rule

Please understand that I have been through all the posts regarding this issue and my issue has not been resolved which is as follows: I have a brand new installation of Server 2008 R2 SP1, with all ...
1
vote
1answer
961 views

Connection refused for Java HTTP Server running on localhost

How would you investigate the following issue? On a specific server; any HTTP-Requests sent to a Java Server running on localhost fails with "Connection refused". (See the Java code here) In the ...
3
votes
1answer
257 views

Block an application from accessing the network, except for a single IP address

How would I go about preventing a specific .exe from accessing any network (TCP) resources, with the exception of 1 or 2 IP addresses? Can it be done with Windows Firewall (netsh or UI) and/or IPSec? ...
1
vote
0answers
621 views

Safari cannot open the page because the server stopped responding

I am running Windows Server 2012 R2, and have 2 web pages running via IIS. The 1st one is on port 80 for HTTP, and the 2nd one is on port 16552 for an API interface. I have opened all the ...
-2
votes
1answer
939 views

geoip block/ mass ip blocks in windows firewall [closed]

i got issue with ransomware attacks day and night from Russia/Ukraine... even with secure rdp some of them get passes now and then and make me suffer... so i want to block geo block whole Russia/...
0
votes
2answers
324 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
2
votes
1answer
1k views

Windows Firewall - difference between disable and “block”

In "Windows Firewall with advanced security", what is the difference between disabling a rule and setting it to "block traffic"? Besides knowing the difference, in my case I want to diminish the ...
4
votes
2answers
572 views

Server is listening in Port 110 and I can't find any way to disable or block it

I have a Windows 2012 R2 server used as web server, with ports for web (80, 443, and 8080) open for public sites hosted on it. Doing some security checks on it, I found it's listening on port 110 too: ...
0
votes
1answer
428 views

IIS on AWS Windows Server 2016 not serving to external clients

I created an AWS Windows Server 2016 instance and also allocated an elastic IP address to it. Server's running fine and I can RDP into it. I also installed IIS on it and ensured that it is running. ...
2
votes
1answer
304 views

Group Policy setting to activate Windows Firewall when not on Business Domain

I've been trying to figure out GPO settings for a couple of days and cannot figure out how to apply a filter of some sort to Windows Firewall to turn it ON when any employee is not on the domain (10.0....
2
votes
2answers
1k views

Windows Firewall: Apply local firewall rules

I have an environment where we have a GPO which we have set on all profiles to have the setting: Apply local firewall rules: No I've confirmed that the GP is applied successfully by using gpresult/...
0
votes
1answer
643 views

Cannot block port 389

I have been trying to completely shut down port 389 on windows firewall. I went into the firewall and added a rule stating to block ALL connections for TCP and UDP for the port 389(Inbound and ...
0
votes
1answer
243 views

SQL Server - Firewall Blocking Replication Even Though Port 1433 is Allowed

I have two servers, Server 1 and Server 2, both are stand-alone, Windows Server 2016 with SQL Server 2017 using default instance. They are not members of a domain, and connected over a VPN (using ...
0
votes
0answers
898 views

How-to DNAT-forward all IP traffic on Windows 10 from IP1 to IP2?

On my local machine, I want to setup a (web-)server that receives data that is sent (via http/https) to IP 65.55.44.109 (vortex.data.micorosoft.com). In order to do that, I need to forward all IP ...
0
votes
1answer
283 views

I can't create a IP whitelist for port 3306

I'm working on a Windows Server and I want to protect users from connecting to port 3306 external. To achieve this, I want to create a whitelist in the firewall. This is the tab with the selected ...
1
vote
0answers
211 views

How to clear program/service from Windows firewall rule with netsh

I want to use netsh.exe to modify an existing Windows firewall rule, to remove the "Programs" and "Services" part of the rule. In other words, I want to set it to "All programs that meet the specified ...
2
votes
1answer
138 views

Spagetti GPOs - All sort of Windows Firewall settings that ultimate disable in favor of Kaspersky

I'm on the newer side when it comes to managing GPOs. I'm trying to clean up an existing domain that is a bit of a mess, too many different folks have put their hands in here over the years, and ...
0
votes
1answer
2k views

Change External NIC to Public on Windows Server 2016

I've got a cloud network: 192.168.100.0/24 with: Pfsense GW (IPSec site-to-site) NIC1 = WAN-IP1 (fully blocked except IPSec) NIC2 = 192.168.100.1 DC (WinServer2016) NIC1 = WAN-IP2 (external) ...
0
votes
1answer
80 views

Accidental Remote Desktop Lockout. IPSec Authentication Required

I didnt find any questions like this when i searched. I messed up pretty badly, we had someone hack our system recently and in an attempt to prevent this in the future I was exploring windows ...
1
vote
0answers
950 views

Windows firewall which ports are opened for SQL Server named instance using dynamic port

In case of SQL Server named instances default configuration in to use TCP port which is dynamic and determined at the time the Database Engine starts. The SQL Server Browser service listens for ...
0
votes
1answer
1k views

Disable all inbound rules in Windows server

I'm running Windows Server 2012 R2 and I need to disable all of the inbound rules. Is there any kind of powershell script to disable the rules all at once and start from a blank canvas? I'm running ...
1
vote
1answer
129 views

Do I need to reset sensible inbound ftp rules for windows firewall (win7)

I have filezilla already installed on my machine. I have no recollection of what permissions / triggers of windows firewall it needed back when I installed it. Today, I wanted to learn how to create ...
3
votes
0answers
1k views

Enabling Network Discovery via GPO does not work when Windows Firewall turned on

Environment: Windows domain I'm trying to turn on network discovery for 100+ computers and I've created a computer-targeted GPO following instructions from this article: https://www.technig.com/...
2
votes
0answers
241 views

Firewall stuck on expand

Ive been having some issues trying to open the Windows Firewall Advanced. It just gets stuck with a "expand" window: expand image Ive been searching a lot on google trying to debug this. If i run a ...
0
votes
2answers
8k views

PowerShell: how open a Windows Firewall port

I need to open a port on Windows Firewall with PowerShell, so I do netsh advfirewall firewall add rule name = "Open port 4443 test" dir=in action=allow protocol=TCP localport=4443 and then Test-...
1
vote
1answer
391 views

Why do I see a lot of incoming netbios activity on my Windows Firewall?

I have been seeing a lot of firewall drops on port 137 and 138 (netbios) after I enabled default behavior on my Windows FW (Block incoming, Allow outgoing) What is the reason for all netbios activity ...
15
votes
4answers
60k views

Windows 10 - Disable warning notification about disabled firewall via GPO

Is there a way to disable the warning that is displayed in the notifications area, telling you that the Windows firewall is disabled? Edit: We would specifically like to achieve this via group policy,...