RE: Guide about PING...Faraz

HI Faraz,

Yes, but be aware that it severely limits the ISA firewall's
functionality, as mentioned at the bottom of the article. You
essentially turn it into a dumb "hardware" firewall, as described over
at: http://isaserver.org/articles/2004dumbdownisa.html 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Faraz [mailto:f_hkhan@xxxxxxxxx] 
Sent: Thursday, April 07, 2005 8:49 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Guide about PING...Faraz

http://www.ISAserver.org

Hi, TOM
should i need to follow these steps? at KB article
"Blocking and Logging Outbound ICMP Traffic
To unconditionally block and log all outbound ICMP traffic that is sent
from the internal network to the external network, follow these steps: "

> Hi Raj,
> 
> Yes! That's it.
> 
> Thanks!=20
> 
> 
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> -----Original Message-----
> From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx]=20
> Sent: Thursday, April 07, 2005 8:19 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Guide about PING...Faraz
> 
> http://www.ISAserver.org
> 
> Is it this one Tom?
> 
>
http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;283213#XSLTH31
2=
> 3
> 121123120121120120
> 
> 
> Raj Periyasamy
> Systems Administrator
> MCSE(Messaging), CCNA
> 
> 
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]=20
> Sent: Thursday, April 07, 2005 8:52 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Guide about PING...Faraz
> 
> http://www.ISAserver.org
> 
> Hey guys,
> 
> There used to be an article on the KB site on how to block PING
requests
> on the LAT interface of the ISA 2000 firewall. Can't seem to find it
> today :(=20
> 
> 
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxx]=20
> Sent: Thursday, April 07, 2005 7:44 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Guide about PING...Faraz
> 
> http://www.ISAserver.org
> 
> Is your ISA returning the ping requests??
> 
> S=20
> 
> -----Original Message-----
> From: Faraz [mailto:f_hkhan@xxxxxxxxx]=20
> Sent: Thursday, April 07, 2005 9:29 AM
> To: ISA Mailing List
> Subject: [isalist] Guide about PING...Faraz
> 
> http://www.ISAserver.org
> 
> Faraz : i am in standalone environment, using ISA 2000, some clients
in
> my internal network send their Ping Requests contineously to my ISA
> server for checking that either the ISA Machine is ON or OFF, i wana
> block those ping requests comming from the internal network, i used
that
> article found at isaserver.org "How to create a packet filter for
> dropping ICMP Packets (Ping Requests)" and restarted all three
services
> of ISA but still can't get the rid of PING requests.....Please guide
me.
> --------------------------
> Jim Harrison : Restart Service after creating packet filter.
> Jim Harrison : get the rid of that ISA "Allow All" rule.
> --------------------------
> Faraz : No, that is also not working i disabled that "Allow Rule" and
> also disabled my own created protocol rules and even disabled all the
IP
> packet filters which were created by default by ISA 2000 during
> installation, i only enabled that one IP packet filter as described in
> the "How to create a packet filter for dropping ICMP Packets (Ping
> Requests)" which drops ICMP ping Query, and restarted all services of
> ISA 2000, but still my clients are sending me ping requests! WHY???
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> The haggis is unusual in that it is neither consistently nocturnal nor
> diurnal, but instead is active at dawn and dusk (crepuscular), with
> occasional forays forth during the day and night.=20
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> raj.periyasamy@xxxxxxxxxxxx
> To unsubscribe visit =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: