Base filtering platform/Engine overiding local firewall settings?

Windows server 2012. Trying to use any port greater than 6000. Was working then suddenly stopped working for two applications that use port 8080 and 8530 (WSUS). Firewall turned off (domain, public and private) and still not good. If I change the port binding
in IIs to lower ports than 6000 then the sites are accessible. I am reading online that Base Filtering Engine (BFE) is the cause and maybe filtering ports that have been opened in FW or even is the firewall is disabled. Is there an update to fix this
or a method for configuring BFE?

Hi,
I suggest you use Netsh trace command to troubleshoot this issue when you specify ports higher than 6000.
For example: Netsh trace start scenario=LAN tracefile=filename.
In the output files, please locate information log about the corresponding port and analyze why it is blocked.
More information for you:
Netsh Commands for Network Trace
http://technet.microsoft.com/en-us/library/jj129382.aspx
Best Regards,
Amy

Similar Messages

Base filtering engine is preventing FTP uploads

Using win 8.1. Ftp uploads (from any ftp program, filezilla, winscp and with knowhow cloud backup) stalls after 2-3 files have been uploaded. A single large file will upload but not multiple small files. If I boot into windows safe mode the problem
does not occur, ftp works fine, always. In normal mode by eliminating one running component at a time I found that the base filtering engine appeared to be the only problem. If base filtering was running the ftp problem occurred, if not then ftp
was fine.
Can one repair or replace the base filtering engine?. I found this as it relates to win 7
FROM ONE OF YOUR OTHER THREADS:
you may download and apply the BFE service registry fix (#11) in this page: Miscellaneous Registry Fixes for Windows 7/XP/Vista - The Winhelponline Blog: LINK REMOVED (could not submit, Body text cannot contain images or links until we are able to verify
your account.)
Is that applicable for this problem in win 8.1?
I do understand the BFE is an important security issue. I have also scanned my system for viruses, I use defender (computer associates) anti virus and firewall, and spybot for malware. I can't specifically pinpoint the occurrence of the problem with
the installation of any specific new software program. I have disabled the defender firewall and virus software and that does not solve the problem. Disabling base filtering engine results in a functioning ftp, enabling results in
a stalled ftp.
Any help would be appreciated.

Try this suggestion
http://social.technet.microsoft.com/Forums/en-US/d8e59632-fca9-4bbd-b748-881af144706a/access-denied-base-filter-engine?forum=winservergen
1. Browse to the location for the BFE service in the registry (HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy), right click and select permissions.
2. In the "Permissions for Policy" window, click advanced | Add.
3. Once the "Select Users, Computers or Group" box appears, change the "From this location:" to point to the local machine name.
4. After changing the search location, enter "NT Service\BFE" in the "Enter the object name to select" box and click "Check names" - this will allow you to add the BFE account.
5. Give the following privileges to the BFE account:
Query Value
Set Value
Create Subkey
Enumerate Subkeys
Notify
Read Control
After adding the BFE account to the registry key, please try to start the Base Filtering Engine service.

Base Filtering Engine and network disconnects

Good day everyone,
I'm working in a standard enterprise environment with windows servers, active directory and windows 7 clients.
Some days ago I've encountered a particularly strange network adapter behavior on some users' machines.
A yellow exclamation mark shows up on the tray icon as if it lost connection, although doing ipconfig displays that it still has ip address, dns, gateway, etc, but no connection to outside world. It only pings itself and localhost. Running windows troubleshooter,
it resets the adapter and it works for a couple minutes, then reverts to this state.
I've managed to pinpoint it to a specific windows service - Base Filtering Engine. If I disable this service, everything is ok. Now, there're a few dependencies that go down with it - specifically windows firewall and ipsec, but disabling them alone doesn't
help. Also, clearing out windows firewall rules doesn't work.
I've tried to find anything in windows events logs, but I couldn't.
So, my question is how can I further investigate this issue, to find out what makes BFE do this to the network adapter?

As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous
steps should be helpful for many similar scenarios.
If the issue still persists and you want to return to this question, please reply this post directly so we will be notified to
follow it up. You can also choose to unmark the answer as you wish.
In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members
facing similar problems.
Thanks!
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Windows 7 Built-In Firewall Filtering Platform Blocking Outlook.exe Even Though Firewall Off

(this post was originally started here,
http://answers.microsoft.com/en-us/office/forum/office_2010-outlook/windows-7-built-in-firewall-filtering-platform/7312a367-3a9f-470a-b6c7-56c041630af1, but recommended to move to this forum)
I first encountered this problem on a Windows 7 computer running Outlook 2007 a couple of weeks ago. The system kept asking the primary user for a password to connect to our Exchange Service. The user kept typing in the correct password, but it would never
connect. Using Outlook Web Access from the same computer with the same user and password was successful, so the credentials and network connection seemed good.
After checking the Security Logs, I found pairs of Event 5152 and 5157 whenever the user tried to enter a password. Example events are listed below (although they are from the most recent incidence). I found out that the Filtering Platform is supposed to
be part of Windows Firewall, but couldn't find much other information about it. However, the Windows Firewall is turned off by Group Policy (verified by looking in the Control Panel for Window Firewall), so I didn't think it should be blocking anything. Oddly
enough, the Windows Firewall service was running on this computer, but it was running on all computers, even if they didn't have this problem.
I found that I could make the problem go away by stopping the Windows Firewall service. However, it seems odd that would be necessary. It seems a bit of a kludgy fix.
I hoped that the problem would only by on one system and could let it go for a bit. Unfortunately, I just had the problem crop up on a new Windows 7 system with Outlook 2010 installed.
At this point, I'm concerned about what might be causing it and that it might start happening on all our systems. I could stop the Windows Firewall service on all of them, but I'd like to understand what might be happening more before taking that action.
For reference, both systems have received all Automatic Updates and are running the McAfee Total Protection Service anti-virus and firewall services.
Any thoughts or suggestions would be appreciated.
Thanks in advance,
indyvql
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          3/9/2015 9:05:38 AM
Event ID:      5152
Task Category: Filtering Platform Packet Drop
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      usercomputer.domain.com
Description:
The Windows Filtering Platform has blocked a packet.
Application Information:
Process ID:  10712
Application Name: \device\harddiskvolume3\program files\microsoft office\office14\outlook.exe
Network Information:
Direction:  Outbound
Source Address:  <IP Address of User Computer>
Source Port:  55279
Destination Address: <Unknown IP Address in 192.168 Subnet, Which is Not Used By Us>
Destination Port:  443
Protocol:  6
Filter Information:
Filter Run-Time ID: 67045
Layer Name:  Connect
Layer Run-Time ID: 48
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          3/9/2015 9:05:38 AM
Event ID:      5157
Task Category: Filtering Platform Connection
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      usercomputer.domain.com
Description:
The Windows Filtering Platform has blocked a connection.
Application Information:
Process ID:  10712
Application Name: \device\harddiskvolume3\program files\microsoft office\office14\outlook.exe
Network Information:
Direction:  Outbound
Source Address:  <IP Address of User Computer>
Source Port:  55279
Destination Address: <Unknown IP Address in 192.168 Subnet, Which is Not Used By Us>
Destination Port:  443
Protocol:  6
Filter Information:
Filter Run-Time ID: 67045
Layer Name:  Connect
Layer Run-Time ID: 48

Hi indyvql,
"..are running the McAfee Total Protection Service anti-virus and firewall services."
- So you've enabled McAfee firewall? If you have McAfee firewall turned on, then everything is managed by McAfee Personal Firewall which might cause the issue.
To troubleshoot the issue, I would suggest we first disable McAfee temporarily, then try again.
Also, as you've mentioned, please go ahead to have a test with just updating McAfee but not stopping the Windows Firewall service, then verify result.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

10.5.1 Firewall Settings

The firewall settings have changed in 10.5.1. I wasn't using the firewall at all, but wanted to and wanted to know which setting was the best for my meager needs. I'm just a guy with an iMac with no wireless and no network, just a direct connection via ethernet to my DSL modem. What setting would you guys recommend? "Allow All" or "Allow Essential"? And if I do Essential will that slow anything down like web browsing or anything else?

Leopard "stealth" is for squat. I just switched from a failing motorola router to the airport extreme with the extra ethernet ports in back. The moto had a firewall and a stealth button.
https://www.grc.com/x/ne.dll?bh0bkyd2 scans your computer and is quite handy.
With the moto router and no mac firewall / stealth enabled, every square was green (stealthed), I was completely invisible. Shields Up, that link, called that an uncommon and very good situation.
With the airport extreme and mac's firewall enabled for essential services and stealth selected, I've got 7 stealthed ports, and 1,048 ports reporting back to the test as closed, and none open. No change from no fire wall, no stealth in preferences/security/firewall. My computer acknowledges itself to outside probes now. Not the best state of affairs.
I don't see anywhere in the airport utility where one can enable a firewall upstream from the computer. It's nice with the AE that everything plays together easily, but as for stealth.... squatola. Anybody can see you, so use modern encryption, like a previous reply said; WPA2/WPA2-Personal.
Maybe X.5.2 will beef up the security a little. Maybe X.5.2 will fix iCal's custom repeating event no show bug too. Doubt it though.
Anyway, Mac still rules. All your bases are belong to us.

How to change the firewall settings to provide remorte access to oracle 10g

dear all
I have created the oracle 10g database and it is working properly...but I cant loging with thedata base remotely when the host's firewall is on..when it is off I can connect with the database remotely..how can I change the firewall settings in this case

You need to configure your firewall to allow traffic on the ports listed in ORACLE_HOME\install\portlist.ini.
You do not need to allow all of the ports, just the ports you want to allow traffic. For example if you are not using iSQL Plus you do not have to open port 5560 or the range 5560–5579.
You can find a description of the ports at the following link.
http://download-east.oracle.com/docs/cd/B19306_01/install.102/b14316/ports.htm#CIHECDEE

Your computer systems firewall settings will prevent you from using AirTune

I haven't used my airport express in a while and I just opened itunes with my airport speakers and I got the error message Your computer systems firewall settings will prevent you from using AirTunes. How can I fix this?
Help!!

I have this same exact problem and it is driving me crazy. I am running on OS X 10.4.11 and only started having this problem when I started using the express to join another network. I had always used it as the base but when I joined the wireless network I created with an airport extreme (just bought it a couple of days ago) I can still use the internet fine, and I can print wirelessly, but when I try to use the speakers wirelessly from iTunes it gives me that warning. I'ce tried opening up a whole bunch of ports on my computer but I have no clue how to correct whatever else needs correcting on the extreme.
APPLE! We need your help!

10.4.10 Upgrade Problems/Firewall Settings

Upgraded X-serve running 10.3.9 with latest Security patch 2007-07 to 10.4 install CDs, then ran Combo updater 10.4.10.
Firewall settings disappeared.
And when I say they disappeared--I mean the entire list of standard services with the little checkboxes under the Services tab is gone--I have no standard services to select from when setting up access for my local network and other groups. The entire field area (allow, description, ports, protocol) is BLANK.
I COULD enter rules under Advanced--but that is a much tougher road to plough--I feel I am working blind and really don't won't to make errors in this area.
Any way to get the firewall default settings list back? Is there a preferences file I can delete or something?

Did you resolve this yet?
I am having exactly the same problem. Yesterday I applied the Security Update 2007-007 and all my Address ranges and Firewall services disappeared. I'm also sure I can recreate everything, but hopefully there's a way of at least putting the default list of services back. It would almost be quicker to reinstall the OS.
Hoping a second voice will help us attract the attention of someone who knows the answer.

How do I change my firewall settings to allow Spotify?

I get a message pop up that says.... A firewall may be blocking Spotify. Please update your firewall to allow Spotify (error 101)
Please help I am so terrible with anything other then the basics.
I found my firewall settings but I could only figure out how to turn them on and off. This did not help.
I need it explained to me in the most simpilist of ways.
Thank you

Please read this whole message before doing anything.
I've tested these instructions only with the Safari web browser. If you use another browser, they may not work as described.
This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.
These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.
Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.
Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.
Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.
Step 1
Triple-click the line of text below on this page to select it:
kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -ef
Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.
Step 2
Repeat with this line:
{ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo; sudo defaults read com.apple.loginwindow LoginHook; echo; sudo crontab -l; } 2> /dev/null | open -ef
This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.
Step 3
{ launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}'; echo; crontab -l 2> /dev/null; } | open -ef
Step 4
ls -A /e*/{cr,la,mach}* {,/}Lib*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -ef
Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.
Step 5
osascript -e 'tell application "System Events" to get name of login items' | open -ef
Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.
You can then quit Terminal.

Unable to reach Adobe servers, Please check firewall settings and try again

I have been a creative cloud customer since it started and I've never experienced such buggy software as the app manager. The customer experience is just shocking and I wish Adobe would just offer direct downloads for the software we need rather than use the app manager.
I'm currently trying to install the latest versions of the programs but the app manager keeps showing "Unable to reach Adobe servers, Please check firewall settings and try again in a few minutes".
I do not have any firewalls on my network.
I've uninstalled all previous versions of the applications.
The app manager will download a few % and then the message appears again. I click retry and it downloads another few % before showing the message again. I keep doing this until the program is fully downloaded and installed which take hours. Because I am able to eventually download the app, the error should be anything to do with my setup or internet connection as I've never had this issue before when installing adobe products.
Is there a way we can bypass the app manager and install the programs directly? This is getting very annoying and I just need my apps to install without wasting days clicking the retry button.

I'm having the exact same problem. Photoshop is stuck at 0%.
Have the links for direct download changed? When I went to http://prodesigntools.com/adobe-cc-direct-download-links.htmland then scrolled down the page to:
Photoshop CC 2014 (64-bit)
740 MB
File 2
801 MB
File 1
and then clicked on File 1 and File 2, I reached a page that says "You don't have permission to access "http://trials3.adobe.com/AdobeProducts/PHSP/15/win64/Photoshop_15_LS20_win64.7z?" on this server."

Creative Cloud is telling me "Unable to reach Adobe servers. Please check your firewall settings, and try again in a few minutes.

Creative Cloud is telling me "Unable to reach Adobe servers. Please check your firewall settings, and try again in a few minutes.
What do I do to access the cloud? I have checked my firewall settings to allow for me to be able to use adobe cloud. Any Suggestions?

Try a different browser and/or turn your firewall off to download
or
A chat session where an agent may remotely look inside your computer may help
Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

How do I remove "Allow all connections" for Pando in my firewall settings?

In System Information under Firewall Settings - Applications, I see the following: com.pando.pando: Allow all connections. However, when I go to System Preferences and look at the firewall options, this is not listed, nor can I find any trace of Pando anywhere else on my computer. Is this hidden somewhere, and how can I get rid of it?

pirihi,
open Safari’s Preferences, and select its Privacy tab. For the “Block cookies and other website data” set of radio buttons, select “Never”.

How do I set my firewall settings in Avasti to allow communications between my HP 8600 and my comput

How do I set my firewall settings in Avasti to allow communications between my HP 8600 and my computer

Something to Consider:
If you are talking about "Avast!" Security Software, either the free or the paid version, the following may apply to you:
There are three main levels of Security in the Avast! software: Home, Work, and Public
Home is the setting many people use when "at home", that is, connected to the home network. The home network is sometimes defined as the "192.168" network: these are the computers and printers that you have and use in your home environment. The network is (most usually) private and (should be) secured with with a passphrase at your router. The Avast! Software sees the "Home" network as a "safe" environment: devices connected within the "Home" network are allowed to "talk" (communicate) with one another without undue restrictions.
Work is the next setting. The software places some restrictions on this level of communication. Home users can certainly use this setting -- in many (most) cases, the "Work" setting is a solution that provides for communication and a bit more security for the home network and its devices.
Public is the strictest setting and is meant to keep your computer safe in a public place: the library, coffee shop, on a street corner. Outside "prying eyes" are prevented from peeping and outside communications are restricted.
If you have set (or left) your Avast! software set to Public, or even Work (and you do not know how to handle the restrictions), then you may have simply locked out the communication between the printer and the computer(s) on your home network.
Open your Avast! Software and set the security level to either "Home" or "Work".
You can find out more about how to use the software settings at the Avast! website.
Advanced Users Only - You will know if you changed the Rules... this is not something one does by accident.
If you have changed the rules within the settings, you may have locked yourself out. Make sure you have both "in" and "out" traffic settings adjusted correctly for each rule you change / adapt / add.
Kind Regards,
Dragon-Fur

How do I change my firewall settings?

I have an account with Active Link, and every time I try to connect, I cannot and I get a message saying: "Please adjust your firewall settings to allow ALconnect to access the Internet. If you aren't sure how to do this, please contact the support team for your firewall software for help."
So that is what I am doing. My cell phone number is XXX if it is easier to contact me by phone.
<sub>edit: removed personal information. we do not provide support via phone, please keep all communications on the public forum. (philipp)</sub>

This is an Active Link issue, not a Firefox issue.
*Active Link's help site is here - https://www.getactivelink.com/help
*Active Link's home page is here - https://www.getactivelink.com/download

How do I edit my firewall settings

How di I edit my firewall settings?

Hey there jacque,
It sounds like you would like to edit your firewall settings. I found this article for you to help you configure it named:
OS X Mountain Lion: Prevent unwanted connections with a firewall
http://support.apple.com/kb/PH11309
Turn on firewall protection
Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
Click the lock icon to unlock it, and then type an administrator name and password.
Click Turn On Firewall.
Allow only specified apps and services to connect
Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
Click the lock icon to unlock it, and then type an administrator name and password.
Click Firewall Options.
Click Add (+), and then select the app or service in the dialog that appears.
Allow only essential apps and services to connect
Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
Click the lock icon to unlock it, and then type an administrator name and password.
Click Firewall Options.
Select the “Block all incoming connections” checkbox.
Allow signed software to receive incoming connections
Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
Click the lock icon to unlock it, and then type an administrator name and password.
Click Firewall Options.
Select the “Automatically allow signed software to receive incoming connections” checkbox.
Thank you for using Apple Support Communities.
Cheers,
Sterling

Base filtering platform/Engine overiding local firewall settings?

Similar Messages

Maybe you are looking for