Thanks alot ISA now working BUT Exchange behind ISA

  • From: "Rolland Basi" <basi948@xxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Tue, 06 Jan 2004 17:37:48 +1000

Jim & Kevin,

Thanks alot for your assistance.

I am now able to ping from SNAT Clients after excluding my external NICs from the LAT.
As per my configuration I excluded my Router & ISAs Ext NIC from the LAT and then configured my ICMP Outbound Packet Filter.


Here's a small problem I still encounter. I can send email from my Exchange 2000 Server which is behind the ISA. BUT I can't receive from outside.

I also enabled SMTP Packet Filter. Is there something I missed out to enable receiving emails from outside.

Thanks in advance
Rolland


From: "Jim Harrison" <jim@xxxxxxxxxxxx>
Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: ISA is still not working
Date: Fri, 2 Jan 2004 15:43:21 -0800

http://www.ISAserver.org

Your ISA has the same subnet internally as externally:
ISA Ext. NIC:   199.245.180.29
    Sub. Mask:  255.255.255.0

ISA Int. NIC:  199.245.180.28
    Sub.Mask:  255.255.255.0

This is non-functional.
Either use non-routable IPs internally or use an entirely separate subnet.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message -----
From: "Rolland Basi" <basi948@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, January 02, 2004 15:19
Subject: [isalist] ISA is still not working


http://www.ISAserver.org

Hello ISA Profs;

Happy New year to you all.

I am still having problem with my ISA Server. ie with pinging from SecureNAT
clients.


Here are my configurations:

ISP IP Address: 202.1.59.8
mask:              255.255.255.248
Gateway:        202.1.59.10

Router Ip Add: 199.245.180.18

ISA Ext. NIC:   199.245.180.29
    Sub. Mask:  255.255.255.0
    DGateway: 199.245.180.18

ISA Int. NIC:  199.245.180.28
    Sub.Mask:  255.255.255.0
    DGateway: none

SecureNAT Clients with Static IP Addresses:
eg.  IP Add:    199.245.180.19
       Mask:       255.255.255.0
       Gateway: 199.245.180.28

      DNS: 199.245.180.28

The ISA Server's Ext NIC is plugged into the Router's Ethernet port. The
Router is then connected to the ISA via a Leased Line.

Can someone figure out where my problem is. I mean what's blocking my SNAT
clients from pinging the ISP Server. I've enable IP filtering and ICMP
outbound but still doesn't work.
As I mentioned in my previous emails, Web browsing is fine.

Please, this has taken me almost a month to get this working, I really need
your help.

Thanks alot.
Rolland

_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: basi948@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail




Other related posts: