Sunday, August 12, 2007

Windows Firewall can not run because another program or service is running that might use the Network Address Translation component (IPNat.sys)

Windows Networking Firewall failure Error

Upon trying to open and configure the Windows built-in Firewall, you receive the error:
"Windows Firewall can not run because another program or service is running that might use the Network Address Translation component (IPNat.sys)"

Cause is due to settings left in by "Routing and Remote Access" service. Even if the service is stopped, Windows will still report this error because the network card bindings are still being held by RRAS.

Disable RRAS by opening the MMC for it and "Disable Remote Access and Routing". This can also be found by Right-clicking "My Computer", opening the Service and Application node.

By Disabling RRAS in this way, the network protocol interface bindings are removed allowing for the Windows Firewall and Connection Sharing service to take over.

18 comments:

Gary said...

Thank you! Your solution works. When I got the firewall back, I discovered that someone entered 20 ip exceptions starting at 5500 for himself. I'm currently thinking the firewall was shut down by an attacker who also opened up Remote Access Service.

David Rodecker said...

Glad to hear that you got passed this hurdle. Sounds like you have been invaded by Desktop remote access or malware. I'd make sure to prevent this from resurfacing: change your windows password then scrub your system (i.e. Defener and Adaware). I wouldn't allow GoToMyPC or related programs that might allow intruders.

Cheers,
David Rodecker

Shakir said...

Hi David,
I've done the solution as you described it but still it won't work. Any other suggestions?

David Rodecker said...

Hi Shakir,

Have you reviewed your Application Event Log and System Event Log?

I would reboot your system, then look at the event logs. Look for any warnings or errors in the same date-time period. You can paste them here and perhaps we can determine the source cause.

Anonymous said...

Can anyone recommend the well-priced RMM utility for a small IT service company like mine? Does anyone use Kaseya.com or GFI.com? How do they compare to these guys I found recently: N-able N-central configuration management
? What is your best take in cost vs performance among those three? I need a good advice please... Thanks in advance!

Anonymous said...

Thanks! Your solution worked perfectly.

techracer said...

Thank you for your solution!
I was having all kinds of problems until I read your site.
It works perfectly

Anonymous said...

thank u very much it worked.

Anonymous said...

I disabled the Routing and remote access service but still does not work, and i have another problem too. when i install IIS on my server 2003, all the services are stopped, i.e default web application and when i try to start it, it gives error "service did not respond to the start or control request in a timely manner" how can i fix this?

David Rodecker said...

Hi Anonymous,
IIS failing to start in a timely manner might be a completely separate issue. See this MSFT KB article which solves one problem due to MSDTC settings.

Pawitra Anindita Putri said...

I have tried your advice but it doesnt work...
they stil appear the same error, can you give me another solutions...

David Rodecker said...

Hi Pawitra,

You should look at some of the comments as well for guidance. Might be able to help you more if you can provide your operating system, where you are getting the error.

sai s k Ssskkk said...

thanks a ton,u dono how much yo post helped me.



Anonymous said...

exactly what does NSA Intercourse mean. I have seen it numerous occasions and would just like
to know what NSA sex means.

Feel free to surf to my webpage pick up women

Anonymous said...

It is perfect time to make some plans for the future and it's time to be happy. I have read this post and if I could I desire to suggest you few interesting things or tips. Maybe you could write next articles referring to this article. I wish to read more things about it!

Look at my site: Online Games

Anonymous said...

A motivating discussion is worth comment. There's no doubt that that you ought to publish more on this topic, it may not be a taboo matter but usually people do not discuss such subjects. To the next! Cheers!!

Stop by my page ... Batman Games Online

Anonymous said...

It's an amazing paragraph in support of all the online people; they will obtain advantage from it I am sure.

My webpage - Free Batman Games

Anonymous said...

THANKKKKKKKKKKKKKKKKKK YOUUUUUUUU!

Share Links