I get nothing, as our firewall does not allow ICMP. I know that now. Chad Schneider Systems Engineer ThedaCare IT 920-735-7615 >>> On 4/29/2008 at 3:24 PM, <CMS0914@xxxxxxxxxxxxx> wrote: When I run the traceroute utility on the CAG Admin desktop, and attempt to traceroute google.com, I literally get nothing. I did a ping from net tools as well, and I send 5, get none received. The IP Pool is 10.x.x.x, the gateway is 10.x.x.1. The gateway is in a DMZ. INT0 to the external (firewall) and INT1 to the internal networks. INT0 ip is 206.X.X.X and default gateway is 206.x.x.1. The internal IP of the gateway is 10.X.X.X. Chad Schneider Systems Engineer ThedaCare IT 920-735-7615 >>> On 4/29/2008 at 3:12 PM, <adwulf@xxxxxxxxx> wrote: 2008/4/29 Chad Schneider (IT) <Chad.M.Schneider@xxxxxxxxxxxxx>: > > > Traceroute from the gateway admin desktop to external sites, NOTHING. > When you say nothing.... ? Do you get something like: C:\>tracert 216.91.182.78 Tracing route to www.savvis.net [216.91.182.78] over a maximum of 30 hops: 1 Destination host unreachable. Trace complete. OR C:\>tracert 216.91.182.78 Tracing route to www.savvis.net [216.91.182.78] over a maximum of 30 hops: 1 80 ms 99 ms 99 ms ctxag01-a [192.168.1.254] 2 * * * Request timed out. 3 * * * Request timed out. What is the default gateway for the VPN clients? Can it reach the outside world? Does it have any filtering on it? -- AdamT We are laser-removed Tasmanian Devil Tattoos ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************