Re: DMZ need help

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 24 Jan 2002 08:04:51 -0800

You've created the DMZ wrong; the netmask needs to be a subset, not a
superset of the external IP range.
Use a larger (.240, .248, .252), not smaller netmask.
Also, ditch the default gateway in the DMZ NIC.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: Мостовой Максим
To: [ISAserver.org Discussion List]
Sent: Thursday, January 24, 2002 06:38
Subject: [isalist] DMZ need help


http://www.ISAserver.org


DMZ doesnot work =(

External NIC 195.34.45.15
          Mask 255.255.255.224
            GW 195.34.45.1

Dmz NIC  195.34.45.193
Mask 255.255.255.192
   GW 195.34.45.1

DMZ Computer NIC 195.34.45.194
Mask 255.255.255.192
Gw 195.34.45.193

Packet Filter on ISA
Protocol: Any
Direction: Both
This computer (on the perimeter network) DMZ computer

Ping working between 195.34.45.194 and 195.34.45.193
Ping dont working between 195.34.45.194(Dmz computer) and ANY ANOTHER HOST !
(195.34.45.15 and others)
PLZ SOMEBODY HELP!!!
May be i must add entry in route ?

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: