Re: Not able to ping DMZ from outside

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 17 Oct 2002 14:55:36 -0700

Not able to ping DMZ from outsideExactly what does the packet filter look like 
that allows ping into the DMZ?
You didn't list the subnet that's associated with the External and DMZ NICs

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://isaserver.org/pages/author_index.asp?aut=3
 http://isatools.org
 Read the help / books / articles!

  ----- Original Message ----- 
  From: Prabhu Nagarathnam 
  To: [ISAserver.org Discussion List] 
  Sent: Wednesday, October 16, 2002 4:47 AM
  Subject: [isalist] Not able to ping DMZ from outside


  http://www.ISAserver.org


  Hello all, 

  I have setup a tri-homed DMZ ISA server. Here are the details: 

  External NIC (202.56.203.14) - connected to Internet 

  DMZ NIC (202.56.203.58) - web server hosted 

  Internal (192.168.0.1/24) - connected to internal network 

  I have done these: 

  (1) IP address set for DMZ are not included in LAT 
  (2) Enabled packet filtering and IP routing. 
  (2) Created packet filter rules to allow all protocols to DMZ both 
directions. 

  The problem is, from internet/outside world I am not able to ping DMZ IP 
address (202.56.203.58) 
  but I am able to ping DMZ clients. (202.56.203.58, 202.56.203.59 etc) 

  How do I enable ping and ICMP from Internet/outside world to ping DMZ IP 
address? 



  Thanks, 
  - Prabhu. 

  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
  ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
  ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Exchange Server Resource Site: http://www.msexchange.org/
  Windows Security Resource Site: http://www.windowsecurity.com/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: