Internet Connection Firewall - why it not workie?

[Alex Thalmann]

Hi all

I've been fiddling with this ICFUtil and ICF component now for a
couple of days and am on the verge of throwing in the towel.

According to the two MSDN articles I found on the subject, I created
an ICFUtil component, as instructed, and have also added the ICS/PF
component, and resolved all the dependencies. Basically, I just want
firewalling protection on two local LAN interfaces, and was looking
forward to using ICFUtil to do this. However, the FBA command
ICFUtil.exe /enable /Q results in a non-0x0 exit code and attempting
to run the ICFUtil.exe /status from the command line results in a
pleasant "ICFUtil: Firewall manager not available" message. I have
also tried using the scripting approach to enable the Firewall, which
results in a 'Could not create object named "HNetCfg.HNetShare.1"'
error. From what I understand, this object is the/a firewall object,
so something seems rather broken.

I've tried adding most of the networking-infrastructure components
(and enabling all the resulting services on the device) with no avail.

Has anybody else got this firewall object working successfully? If so,
perhaps you could point out anything that I may be missing here.

 

[KM]

Alex,

Wondering if your image includes "Connection Manager Runtime" component?
And I believe you have included "Internet Connection Sharing and Firewall ".

KM

 

[Alex Thalmann]

Hi KM

I didn't include the "Connection Manager Runtime" - I wasn't aware I
needed this component to do firewalling. I do recall trying to add
that component but it wants to drag Add/Remove Hardware and the
Internet Connection Wizard into the fray, so I removed it again
without trying it. So for now, I've added it and have 'disabled' the
other two components that I don't want - hopefully it won't break.
Will give it a bash.

 

[Alex Thalmann]

I tried adding the Connection Manager runtime - unfortunately I still
get the same results.

Note that I don't have the GUI on my installation, so everything is
CMD line driven.

 

[Alex Thalmann]

Ok, for future reference, make sure your VSS (Volume Shadow Copy)
service is installed, because the WMI service depends on this, which
when not running breaks the ICF, amongst other things.