I'm running a (.net WCF) HTTP Service on 0.0.0.0:60001 and a remote client - on the same network - can't connect. Looking at the windows event log, i can see two related events:
Event ID 5152, The Windows Filtering Platform has blocked a packet.
Network Information:
Direction: Inbound
Source Address: 192.168.2.80
Source Port: 42989
Destination Address: 192.168.2.223
Destination Port: 60001
Protocol: 6
and:
Event ID 5157, The Windows Filtering Platform has blocked a connection.
Network Information:
Direction: Inbound
Source Address: 192.168.2.223
Source Port: 60001
Destination Address: 192.168.2.80
Destination Port: 42989
Protocol: 6
Application Information:
Process ID: 4
Application Name: System
Filter Information:
Filter Run-Time ID: 71532
Layer Name: Receive/Accept
Layer Run-Time ID: 44
UPDATE I just found out that there's a "McAfee Firewall core Service" running. My best bet is that it's also hooking into Windows Filtering Platform and causing my issues... can anyone confirm whether this is likely true or not?
So naturally i go poking around Windows Firewall with advanced security
.
Let me start with saying that i'm using a computer connected to a domain. There are security policies in place so that i can't adjust all settings. The firewall is configured as follows:
Firewall State: On (recommended) (can't change that)
Inbound connections: Block (default) (can only change that to Block all connection)
Outbound connections: Allow (default) (can't change that)
and it's running on all interfaces (can't change that either).
I've tried adding Inbound
Allow
rules. This is a summary of the most generic "allow all" one:
Profile: All, Action: Allow, Override: No, Program: Any, Local Address: Any, Remote Address: Any, Protocol: Any, LocalPort: Any, RemotePort: Any, Allowedusers: Any, AllowedComputers: Any
Additionaly I've tried Inbound
allow
rules:
- specific to the program.
- specific to TCP Port 60 001
- specific to UDP Port 60 001
No combinations of these help.
I've also checked Windows Firewall with Advanced Security
- Monitoring
- Firewall
. It shows all active rules, all of them are Action = Allow
. There's no blocking rules. The rules i've created show up in this list.
I've also tried restarting the computer after changing the rules. And I've also restarted the program after every rule change.
Nothing helped so far.
Can you give me a hint what could be causing this? How can i get it working? Could there be domain-policies which prevent me from actually allowing such an incoming connection? If so - how can I check whether there are?