Vista firewall blocks unblocked port





I installed OpenVPN on my notebook, but the Vista firewall keeps
blocking it, even after I made an exception for this port in the
firewall.

When I completely turn off the firewall, OpenVPN works fine, but I
don't want to turn off my firewall for obvious reasons.

In the Settings for Windows Firewall dialog box:
1) In the advanced tab, I disabled the firewall for the OpenVPN
connection.
2) In the Exceptions tab, I added an exception for UDP-port 1194.

I turned on logging of the Firewall and see this:

#Fields: date time action protocol src-ip dst-ip src-port dst-port size
tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path
2009-06-15 12:11:52 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:11:54 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:11:56 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:11:58 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:00 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:02 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:04 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:04 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:06 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE
2009-06-15 12:12:08 DROP UDP 192.168.0.8 192.168.0.121 1194 49356 128 -
- - - - - - RECEIVE

(192.168.0.8 is the gateway and 192.168.0.121 is the local machine).

In other words: Vista firewall still drops the incoming packets from
UDP-port 1194!

Even when I have the firewall turned on and unblock all incoming
connections, it still drops UDP-port 1194.

I searched the internet for an explanation, but couln't find it.

Does anyone have an idea? What else can I try?


--
ejm
.



Relevant Pages

  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... list and exception is allowed (of coz tight to the scope of your exception ... inetinfo.exe without any port restriction..... ... I decided to try adding a port 21 in the firewall exception list just to ... I found this on the inetinfo thingy, but he unchecks the FTP service from ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... Bernard Cheah ... FTP service is listed, it should be bi-directional. ... I'm confuse as well:) between the advanced tab and exception tab. ... I decided to try adding a port 21 in the firewall exception list ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... FTP service is listed, it should be bi-directional. ... I'm confuse as well:) between the advanced tab and exception tab. ... I decided to try adding a port 21 in the firewall exception list ... when I entered a "dir" command at the client FTP prompt, ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... add a welcome message to the ftp. ... Bernard Cheah ... list and exception is allowed (of coz tight to the scope of your ... I decided to try adding a port 21 in the firewall exception list ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... add program not add port. ... I'm confuse as well:) between the advanced tab and exception tab. ... port in the Exceptions and checking the FTP Server in the Advanced ... I decided to try adding a port 21 in the firewall exception list just to ...
    (microsoft.public.inetserver.iis.ftp)