| Previous | Next |
| STATUS_FWP_CANNOT_PEND | STATUS_NDIS_CLOSING |
STATUS_FWP_DROP_NOICMP
The packet should be silently dropped
These status values come from the Windows Filtering Platform path. For STATUS_FWP_DROP_NOICMP, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.
This status is a policy outcome: the packet is dropped and no ICMP error should be emitted. It matters for firewalls, IPsec, and filtering callouts because silent drop changes what the remote peer observes.
For STATUS_FWP_DROP_NOICMP, for diagnostics, keep the failing API call, layer or sublayer key, provider context type, filter condition set, callout id, engine state, and whether the Base Filtering Engine, IKEEXT, TCP/IP stack, or L2 path was ready.
What to inspect
- Record the filter or callout that selected silent drop.
- Do not expect an ICMP unreachable on the wire.
- Use WFP net events or audit logs to identify the responsible policy.
References for STATUS_FWP_DROP_NOICMP
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: Windows Filtering Platform
- Microsoft: Audit Filtering Platform Policy Change
Looking for a different code? Search another status or error code.