2

I had read in the answer to this question that the Remote IP Address scope list limit is 1000 in Windows Firewall for a given rule. I am however at 1043 entries in the remote IP Address scope list and still able to add more (both programmatically and interactively through the GUI) without issue. The question/answer specifically referenced Windows Server 2008R2 so I checked the behavior under that OS and it seems like the 1000 limit is not a problem there either.

Is the answer wrong or was there some sort of patch released since that question was asked/answered which upped the limit? I have looked on the internet to see if there is an upper limit to the scope list and have been unable to find any documentation other than the previously mentioned post.

Is there a realistic limit and what is it?

2
+50

A Microsoft software engineer who worked on Windows Firewall provided an answer to essentially the same question:

Is anybody aware about Windows 2008 firewall limits like Max Number of Rules or Max Number of Remote Addresses?

And his answer:

There is no limit to how many rules can be added(other than the cap of UINT64 for the filterId), nor how many conditions can be in each filter (other than the cap of a UINT32 for the numFilterConditions).

| improve this answer | |
  • In practice, a rule can have 1000 entries in the scope. See superuser.com/questions/712831/… – jjxtra Jun 26 '17 at 19:14
  • I am curious as to the cause -- is that possible 1000 rule cap like the UINT(*) caps listed here? And if not what else could be causing it 'in practice' for the person mentioning something like that in the other answer? And is it different for 32/64 architectures? – Jeff Clayton Jun 27 '17 at 12:28
  • I've run into this issue on every 64 bit Windows I've tested on (8, 10 and Server 2012). Have not tried 32 bit Windows. – jjxtra Jun 27 '17 at 16:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.