What does NTSTATUS 0xC0220104 (STATUS_FWP_DROP_NOICMP) mean?

 
Previous Next
STATUS_FWP_CANNOT_PEND STATUS_NDIS_CLOSING

STATUS_FWP_DROP_NOICMP

The packet should be silently dropped

These status values come from the Windows Filtering Platform path. For STATUS_FWP_DROP_NOICMP, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

This status is a policy outcome: the packet is dropped and no ICMP error should be emitted. It matters for firewalls, IPsec, and filtering callouts because silent drop changes what the remote peer observes.

For STATUS_FWP_DROP_NOICMP, for diagnostics, keep the failing API call, layer or sublayer key, provider context type, filter condition set, callout id, engine state, and whether the Base Filtering Engine, IKEEXT, TCP/IP stack, or L2 path was ready.

What to inspect

  • Record the filter or callout that selected silent drop.
  • Do not expect an ICMP unreachable on the wire.
  • Use WFP net events or audit logs to identify the responsible policy.

References for STATUS_FWP_DROP_NOICMP


Looking for a different code? Search another status or error code.