Link to home
Start Free TrialLog in
Avatar of hconant
hconantFlag for United States of America

asked on

Windows firewall (Ipnat.sys) conflict stopping connections

When I restart my SBS2003 server (with one NIC) I get an error that one service did not start.  The event log says there's a conflict with WF and Ipnat.sys.  At that point no clients can connect to the server.  I have to manually stop Ipnat, and then everyone can connect normally.  I am not even sure what ipnat is but stopping it does not seem to effect things.  However, it is a hassle since it has be be manually stopped each time the server is restart, although normally that should not be often, it still is not right.  There is also something strange going on with WF anyway, because of the following errors.
The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error:
The requested resource is in use.

"The Windows Firewall/Internet Connection Sharing (ICS) service could not start because another program or service is running that might use the network address translation component (Ipnat.sys). This can occur when Routing and Remote Access is enabled. If this is the case, you must disable Routing and Remote Access before the Windows Firewall/Internet Connection Sharing (ICS) service can start."

I have tried to stop the RRAS, but it doens not even appear under the Administrative Tools menu.

When I run the configure Email and Internet Connection Wizard it stops when it gets to the Firewall component and asks me if I want to continue, which I do.  Everything appears to be working internally OK, but I don't have any RWA which we use frequently (or at least used to).  I also  am unable to connect internally to the service via  http:\remote\server, which used to work fine.
Avatar of iCoreKC
iCoreKC
Flag of United States of America image

If ipnat.sys has a service associated to it I would just disable the service and troubleshoot it at my leisure if the users can connect.

I do know that there was a MS KB article that said SP 2 was creating this type of issue.  Ipnat.sys is the network address translation system file that Windows fire wall uses.

Here is a link to someone on another forum that appears to be having the same issue.

http://forums.windowsitpro.com/web/forum/messageview.aspx?catid=55&threadid=47342&enterthread=y
Avatar of sguinn100
sguinn100

->The Windows Firewall/Internet Connection Sharing (ICS) service<- This service should be disabled. SBS does not support ICS. Disable it and re-boot the server.
Avatar of hconant

ASKER

Hate to sound stupid, but how do you disable the ICS?
Avatar of hconant

ASKER

The plot thickens.  I've used the net stop sharedaccess command to stop ics, and it responds saying the Windows Firewall/Internet Connection Sharing is not started.  I've also disabled RRAS.  So what is trying to start ICS, and why?  I am still unable to get the IC wizard to get past the Firewall portion and I believe this is why I am unable to use Remote Web Access.
You do not want to stop the service, You want the service DISABLED. Turned completely off. Then re-boot.
Avatar of hconant

ASKER

Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS), is not an option on my Administrative Tools > Services menu.  So I don't know how/where to disable ICS without that option.  I can only assume it is not listed because it is not enabled.  For that matter, I do not see where/how you would explicitly enable ICS if you choose to.  It must be dependent/enabled as a result of some other service?
try inserting operating system cd

start -> run

type sfc /scannow
ASKER CERTIFIED SOLUTION
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What if I am seeing this error and the Security Configuration Wizard is not installed on the server?