RE: Default IP (again)

From: "Blake Al" <al.blake@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Sun, 23 Dec 2001 14:01:37 +1100
Gary,
Great suggestion but unfortunately I dont have a default gateway on the 
internal NIC :(
To answer your other question - I use the different Ips for different 
things....makes rulesets much easier and more foolproof (even for someone like 
me). Means the rulesets on my boundary router only have to allow specific 
packets for specific IPs.
 
For instance I use the default IP for the outgoing web browsing etc (or try to)
I have a different IP for the mail server.....
I have another IP that is totally internal (ie I dont let packets to/from it 
to/from the Internet). Why? So that my boundary router can save its configs via 
ftp to an internal ftp host. Ensuring the IP is NOT passed through the boundary 
router seals it up pretty tight.
 
Anyway.....I still dont know why my ISA box is using the wrong IP as its 
default..........

        -----Original Message----- 
        From: Gary Anderson [mailto:gary.anderson@xxxxxxxxxxxxx] 
        Sent: Thu 12/20/2001 1:04 AM 
        To: [ISAserver.org Discussion List] 
        Cc: 
        Subject: [isalist] RE: Default IP (again)
        
        

        http://www.ISAserver.org
        
        
        Hi Al,
        
        This may sound dumb but does the internal NIC have a default gateway
        specified in the set up?  It shouldn't.
        
        Why do you need more than one address on the external NIC?
        
        Gary
        
        -----Original Message-----
        From: Blake Al [mailto:al.blake@xxxxxxxxxxxxxxx]
        Sent: Tuesday, December 18, 2001 23:10
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Default IP (again)
        
        
        http://www.ISAserver.org
        
        
        So from the resounding silence it take it that:
        
        1. No one else has ever had this problem?
        2. No one knows how to attack this problem?
        3. Everyone is on holiday ? ;)
        
        ...am I really going to have to reinstall ISA to get to use the correct 
Ip
        as the default?
        
        -----Original Message-----
        From: Blake Al
        Sent: Friday, 14 December 2001 11:37 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Default IP (again)
        
        
        http://www.ISAserver.org
        
        
        I should add that in the Advanced tab the IPs are listed in the order:
        
        203.110.145.178 255.255.255.240
        
        203.110.145.179 255.255.255.240
        203.110.145.180 255.255.255.240
        203.110.145.181 255.255.255.240
        
        [Blake Al]  -----Original Message-----
        From: Blake Al
        Sent: Friday, 14 December 2001 11:34 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Default IP (again)
        
        
        
        http://www.ISAserver.org
        
        
        OK,
        I have done some checking and established that my ISA server is using 
the
        WRONG IP for outgoing traffic defined by protocol rules.
        My external Nic is configured:
        
        MAIN tab:
        203.110.145.178 255.255.255.240
        
        ADVANCED tab:
        203.110.145.179 255.255.255.240
        203.110.145.180 255.255.255.240
        203.110.145.181 255.255.255.240
        
        When I check the outgoing traffic on my boundary router all the packets 
that
        come from protocol rules (where I dont have the opportunity to specify 
an
        outgoing IP to use) come from 203.110.145.179. So it seems as though ISA
        regards this as the default?
        
        Questions:
        1. Why doesnt ISA regard the IP on the MAIN tab of the inteface config 
as
        the default?
        2. How can I make it use the correct IP as the default?
        ------------------------------------------------------------------------
        Al Blake
        ICT Manager, Canberra Girls Grammar School
        Melbourne Avenue, Deakin, ACT 2600, Australia.
        Switch: +61 2 62026400
        Direct: +61 2 62026448
        Mobile: +61 408 296 381
        Fax: +61 2 62731505
        ------------------------------------------------------------------------
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as:
        al.blake@xxxxxxxxxxxxxxx
        To unsubscribe send a blank email to leave-isalist-373087Q@xxxxxxxxxxxxx
        
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as:
        al.blake@xxxxxxxxxxxxxxx
        To unsubscribe send a blank email to leave-isalist-373087Q@xxxxxxxxxxxxx
        
        
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as:
        gary.anderson@xxxxxxxxxx
        To unsubscribe send a blank email to leave-isalist-373087Q@xxxxxxxxxxxxx
        
        
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
al.blake@xxxxxxxxxxxxxxx
        To unsubscribe send a blank email to leave-isalist-373087Q@xxxxxxxxxxxxx
RE: Default IP (again)

Other related posts:
