RE: The Lost Packet
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 16 Jan 2002 06:53:19 -0800
Peter is right; packet filters only allow traffic into ISA, not through it
(except for secureNAT PPTP and DMZ).
ISA requires a publishing rule to allow external access to LAT-based hosts.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: "Olivier PHILIPP" <ophilipp@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 16, 2002 01:21
Subject: [isalist] RE: The Lost Packet
http://www.ISAserver.org
Hi Peter...
I think I do not need a publishing rule because I create a packet filter
that open the
access to the computer I want to access,
AND I enable IP routing in Packet Filter option.
So ISA "should" route my packets from the external interface to the internal
interface
according to the LAT table... Am I wrong ????????
THANX
Olivier
[May be my problem is the same that the other thread : Subnet routing ???]
> Olivier,
>
> It appears that you need a server publishing rule. The rule will tell ISA
which IP address on your internal network you want the Telnet request sent
to.
>
> "Olivier PHILIPP" <ophilipp@xxxxxxxxxx> wrote:
>
> >
> >
> >Hello everybody...
> >
> >I want access to a specific computer in my intenral network (for telnet),
> >using Packet Filter.
> >
> >The packet filter is working well because all packets are marked
'ALLOWED'.
> >The problem is that ISA server doesn't send any packet to my computer.
> >Packets seem to be lost...
> >
> >I see the packet with NetMon on my External card, but no one on my
> >Internal card.
> >Shouldn't ISA route my packet from externat card to intrnal card ?
> >
> >All help are very very Welcome !!!!
> >
> >
> >ISA Card :
> >External : 212.234.24.180 MASK 255.255.255.224 gateway : 212.234.24.161
> >Internal : 10.0.0.80 MASK 255.255.0.0
> >
> >Packet filter : On
> >Packet routing : On
> >
> >
> >
> >
> >OLIVIER... (sorry for my poor english !)
> >
============================================================================
====
Votre email a ete controle avec SOPHOS Anti-Virus par www.leclubauto.com le
16/01/2002 10:21:15
============================================================================
====
Votre email a ete controle avec SOPHOS Anti-Virus par www.leclubauto.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
