Not able to ping DMZ from outsideExactly what does the packet filter look like that allows ping into the DMZ? You didn't list the subnet that's associated with the External and DMZ NICs Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help / books / articles! ----- Original Message ----- From: Prabhu Nagarathnam To: [ISAserver.org Discussion List] Sent: Wednesday, October 16, 2002 4:47 AM Subject: [isalist] Not able to ping DMZ from outside http://www.ISAserver.org Hello all, I have setup a tri-homed DMZ ISA server. Here are the details: External NIC (202.56.203.14) - connected to Internet DMZ NIC (202.56.203.58) - web server hosted Internal (192.168.0.1/24) - connected to internal network I have done these: (1) IP address set for DMZ are not included in LAT (2) Enabled packet filtering and IP routing. (2) Created packet filter rules to allow all protocols to DMZ both directions. The problem is, from internet/outside world I am not able to ping DMZ IP address (202.56.203.58) but I am able to ping DMZ clients. (202.56.203.58, 202.56.203.59 etc) How do I enable ping and ICMP from Internet/outside world to ping DMZ IP address? Thanks, - Prabhu. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')