Re: Allowing ICMP packets through ISA server

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 25 Jun 2002 22:32:01 -0700

Ahh, I must have read it inside out...
You'll need to create two packet filters:
1.
    Name: "DMZ Ping In"
    Filter Type: ICMP ping query
    Local Computer: "These computers (on the perimeter network)"
     (enter your DMZ subnet here)
    Remote Computer: <your choice, but I prefer to IP-limit this>
 2.
    Name: "DMZ Ping Out"
    Filter Type: ICMP all outbound
    Local Computer: "These computers (on the perimeter network)"
     (enter your DMZ subnet here)
    Remote Computer: <your choice, but I prefer to IP-limit this>

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: "arun prasadh" <arun_arun@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, June 25, 2002 10:14 PM
Subject: [isalist] Re: Allowing ICMP packets through ISA server


http://www.ISAserver.org


Thanks Jim,

I am not using LAT , i am using Public address in the DMZ. To start with i
want to check whether my Hosts in the DMZ are alive by using Ping and Trace
Route command.

I am setting up FW for the first time , kindly assist.

Thanks.
Arun

----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
Date: Tue, 25 Jun 2002 22:08:19 -0700
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Allowing ICMP packets through ISA server


> http://www.ISAserver.org
>
>
> ISA doesn't allow ICMP to pass inbound to the LAT.
> You can't create a rule for it, either.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
> ----- Original Message -----
> From: "arun prasadh" <arun_arun@xxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Tuesday, June 25, 2002 9:27 PM
> Subject: [isalist] Allowing ICMP packets through ISA server
>
>
> http://www.ISAserver.org
>
>
> How to allow ICMP request from external INTERNET to the internal local
> network through the ISA firewall. what rule should i create to allow the
> request and for response.
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
arun_arun@xxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>

--
__________________________________________________________

Sign-up for your own FREE Personalized E-mail at Mail.com

http://www.mail.com/?sr=signup



Save up to $160 by signing up for NetZero Platinum Internet service.

http://www.netzero.net/?refcd=N2P0602NEP8



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: