Find who excluded port range

Question

When trying to start docker container, the following errors is shown:

Cannot start service <service>: Ports are not available: listen tcp 0.0.0.0:5601: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

netstat -aon shows that port is not in used.

Running netsh int ipv4 show excludedportrange protocol=tcp shows:

Start Port    End Port
----------    --------
      1037        1136
      1137        1236
      1641        1740
      1741        1840
      2869        2869
      5357        5357
      5433        5532
      5533        5632
     10243       10243
     34036       34135
     34136       34235
     48369       48468
     48469       48568
     48569       48668
     48669       48768
     50000       50059     *

So it seems that port range 5533-5632 is excluded.

How can I find the culprit that added this exclusion range, and why?

score 8 · Answer 1 · answered Apr 27 '23 at 15:10

It's probably because of Windows NAT. Restarting WinNAT might be enough to remove all excluded port ranges except the administrated one.

In your case, you might want to stop WinNAT:

net stop winnat

Then, start your docker container before starting WinNAT:

net start winnat

Find who excluded port range

1 Answers1