Ahh, I must have read it inside out... You'll need to create two packet filters: 1. Name: "DMZ Ping In" Filter Type: ICMP ping query Local Computer: "These computers (on the perimeter network)" (enter your DMZ subnet here) Remote Computer: <your choice, but I prefer to IP-limit this> 2. Name: "DMZ Ping Out" Filter Type: ICMP all outbound Local Computer: "These computers (on the perimeter network)" (enter your DMZ subnet here) Remote Computer: <your choice, but I prefer to IP-limit this> Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "arun prasadh" <arun_arun@xxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Tuesday, June 25, 2002 10:14 PM Subject: [isalist] Re: Allowing ICMP packets through ISA server http://www.ISAserver.org Thanks Jim, I am not using LAT , i am using Public address in the DMZ. To start with i want to check whether my Hosts in the DMZ are alive by using Ping and Trace Route command. I am setting up FW for the first time , kindly assist. Thanks. Arun ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> Date: Tue, 25 Jun 2002 22:08:19 -0700 To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: Allowing ICMP packets through ISA server > http://www.ISAserver.org > > > ISA doesn't allow ICMP to pass inbound to the LAT. > You can't create a rule for it, either. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/authors/harrison/ > Read the books! > ----- Original Message ----- > From: "arun prasadh" <arun_arun@xxxxxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Tuesday, June 25, 2002 9:27 PM > Subject: [isalist] Allowing ICMP packets through ISA server > > > http://www.ISAserver.org > > > How to allow ICMP request from external INTERNET to the internal local > network through the ISA firewall. what rule should i create to allow the > request and for response. > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: arun_arun@xxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Save up to $160 by signing up for NetZero Platinum Internet service. http://www.netzero.net/?refcd=N2P0602NEP8 ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')