You can setup different types of ping with "ping" you know. ping yourmachine -t -l 1500 -f ping yourmachine -t -l 1440 -f These will help you determine if your MTU is too large or making it Though routers. It is my understanding that if one segment requires Lets say 1000 then all segments will be set to 1000 and then you Will have various packet fragments being split up. ping /? Usage: ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS] [-r count] [-s count] [[-j host-list] | [-k host-list]] [-w timeout] destination-list Options: -t Ping the specified host until stopped. To see statistics and continue - type Control-Break; To stop - type Control-C. -a Resolve addresses to hostnames. -n count Number of echo requests to send. -l size Send buffer size. -f Set Don't Fragment flag in packet. -i TTL Time To Live. -v TOS Type Of Service. -r count Record route for count hops. -s count Timestamp for count hops. -j host-list Loose source route along host-list. -k host-list Strict source route along host-list. -w timeout Timeout in milliseconds to wait for each reply. Thank you, Joseph -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Wednesday, July 07, 2004 10:14 AM To: [ISAserver.org Discussion List] Subject: RES: [isalist] RE: FWX_E_TCP_NOT_SYN_PACKET_Dropped Yes, i have an access rule that allows it. I can even ping the mainframe. I'm trying to reduce the MTU to see if it solves the problem. Thanks!! Tiago de Aviz -----Mensagem original----- De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Enviada: qua 7/7/2004 14:06 Para: [ISAserver.org Discussion List] Cc: Assunto: [isalist] RE: FWX_E_TCP_NOT_SYN_PACKET_Dropped http://www.ISAserver.org Hi Tiago, Do you have an access rule allowing the connection? Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Get the book! Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Wednesday, July 07, 2004 12:06 PM To: [ISAserver.org Discussion List] Subject: [isalist] FWX_E_TCP_NOT_SYN_PACKET_Dropped http://www.ISAserver.org Hello all, i'm getting this error when i'm trying to access a Telnet server (3270 terminal emulation). The server is behind a router that I have here connected in my internal network.The route to reach the mainframe is configured in my RRAS on the ISA Server. I saw a forum that tom said this could be a connection limit issue, so i raised it but it didn't help. For an example, if I ping the damned thing it answers. But if I want to telnet it, all my packets are denied and on the status code returned on the log it tells me that. By the way, it's an ISA 2004 ;) Tiago ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Tenha proteção contra vírus e spam para seu servidor de correio pagando apenas uma pequena mensalidade! Veja os serviços de Gateway em www.softsell.com.br <http://www.softsell.com.br> ! ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist < /BLOCKQUOTE>