Re: Allowing ICMP packets through ISA server
- From: "arun prasadh" <arun_arun@xxxxxxxxx>
- To: "\[ISAserver.org Discussion List\]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 26 Jun 2002 00:55:25 -0500
Thanks Jim,
It doesnt work even after i created these two filters, however when i stop the
firewall service it allows me to ping .
kindly assist
thanks
Arun
----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
Date: Tue, 25 Jun 2002 22:32:01 -0700
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Allowing ICMP packets through ISA server
> http://www.ISAserver.org
>
>
> Ahh, I must have read it inside out...
> You'll need to create two packet filters:
> 1.
> Name: "DMZ Ping In"
> Filter Type: ICMP ping query
> Local Computer: "These computers (on the perimeter network)"
> (enter your DMZ subnet here)
> Remote Computer: <your choice, but I prefer to IP-limit this>
> 2.
> Name: "DMZ Ping Out"
> Filter Type: ICMP all outbound
> Local Computer: "These computers (on the perimeter network)"
> (enter your DMZ subnet here)
> Remote Computer: <your choice, but I prefer to IP-limit this>
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
> ----- Original Message -----
> From: "arun prasadh" <arun_arun@xxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Tuesday, June 25, 2002 10:14 PM
> Subject: [isalist] Re: Allowing ICMP packets through ISA server
>
>
> http://www.ISAserver.org
>
>
> Thanks Jim,
>
> I am not using LAT , i am using Public address in the DMZ. To start with i
> want to check whether my Hosts in the DMZ are alive by using Ping and Trace
> Route command.
>
> I am setting up FW for the first time , kindly assist.
>
> Thanks.
> Arun
>
> ----- Original Message -----
> From: "Jim Harrison" <jim@xxxxxxxxxxxx>
> Date: Tue, 25 Jun 2002 22:08:19 -0700
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Subject: [isalist] Re: Allowing ICMP packets through ISA server
>
>
> > http://www.ISAserver.org
> >
> >
> > ISA doesn't allow ICMP to pass inbound to the LAT.
> > You can't create a rule for it, either.
> >
> > Jim Harrison
> > MCP(NT4, W2K), A+, Network+, PCG
> > http://isaserver.org/authors/harrison/
> > Read the books!
> > ----- Original Message -----
> > From: "arun prasadh" <arun_arun@xxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Tuesday, June 25, 2002 9:27 PM
> > Subject: [isalist] Allowing ICMP packets through ISA server
> >
> >
> > http://www.ISAserver.org
> >
> >
> > How to allow ICMP request from external INTERNET to the internal local
> > network through the ISA firewall. what rule should i create to allow the
> > request and for response.
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe send a blank email to $subst('Email.Unsub')
> >
> >
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> arun_arun@xxxxxxxxx
> > To unsubscribe send a blank email to $subst('Email.Unsub')
> >
>
> --
> __________________________________________________________
>
> Sign-up for your own FREE Personalized E-mail at Mail.com
>
> http://www.mail.com/?sr=signup
>
>
>
> Save up to $160 by signing up for NetZero Platinum Internet service.
>
> http://www.netzero.net/?refcd=N2P0602NEP8
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> arun_arun@xxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup
Save up to $160 by signing up for NetZero Platinum Internet service.
http://www.netzero.net/?refcd=N2P0602NEP8
Other related posts:
