Re: DMZ need help

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 25 Jan 2002 07:15:07 -0800

Take the default gateway out of the DMZ NIC on the ISA.
Only one ISA interface gets a default gateway; that's the external NIC.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Мостовой Максим" <maxim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, January 24, 2002 08:08
Subject: [isalist] Re: DMZ need help


http://www.ISAserver.org


Sorry i am bad speak english i dont understand whats is means ?
....Also, ditch the default gateway in the DMZ NIC.

----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, January 24, 2002 7:04 PM
Subject: [isalist] Re: DMZ need help


> http://www.ISAserver.org
>
>
> You've created the DMZ wrong; the netmask needs to be a subset, not a
> superset of the external IP range.
> Use a larger (.240, .248, .252), not smaller netmask.
> Also, ditch the default gateway in the DMZ NIC.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
>
> ----- Original Message -----
> From: Мостовой Максим
> To: [ISAserver.org Discussion List]
> Sent: Thursday, January 24, 2002 06:38
> Subject: [isalist] DMZ need help
>
>
> http://www.ISAserver.org
>
>
> DMZ doesnot work =(
>
> External NIC 195.34.45.15
>           Mask 255.255.255.224
>             GW 195.34.45.1
>
> Dmz NIC  195.34.45.193
> Mask 255.255.255.192
>    GW 195.34.45.1
>
> DMZ Computer NIC 195.34.45.194
> Mask 255.255.255.192
> Gw 195.34.45.193
>
> Packet Filter on ISA
> Protocol: Any
> Direction: Both
> This computer (on the perimeter network) DMZ computer
>
> Ping working between 195.34.45.194 and 195.34.45.193
> Ping dont working between 195.34.45.194(Dmz computer) and ANY ANOTHER HOST
!
> (195.34.45.15 and others)
> PLZ SOMEBODY HELP!!!
> May be i must add entry in route ?
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
maxim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: