What does NTSTATUS 0xC0220042 (STATUS_FWP_INVALID_DNS_NAME) mean?

 
Previous Next
STATUS_FWP_CONNECTIONS_DISABLED STATUS_FWP_STILL_ON

STATUS_FWP_INVALID_DNS_NAME

A DNS name used by the policy cannot be parsed or accepted

These status values come from the Windows Filtering Platform path. For STATUS_FWP_INVALID_DNS_NAME, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

Some IPsec and WFP policy objects can carry DNS names for endpoints or conditions. This status reports invalid name syntax or unsupported content before any network lookup is attempted.

For STATUS_FWP_INVALID_DNS_NAME, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.

What to inspect

  • Validate the configured DNS name string.
  • Check whether wildcards or internationalized names are supported in that field.
  • Do not confuse invalid syntax with DNS resolution failure.

References for STATUS_FWP_INVALID_DNS_NAME


Looking for a different code? Search another status or error code.