Re: allowing incoming icmp

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 11 Jan 2002 20:13:18 -0800

ICMP doesn't have a "port"; it's a whole different layer in the TCP/IP stack.
You may be referring to a "keepalive ping", where a switch / router will 
occasionally make a TCP connection on a given port to verify application state.
This is fairly common in load-balancing hardware..

Is your SMTP server a secureNAT client?
Do you have the correct protocol rules in place?

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

  ----- Original Message ----- 
  From: Greg Mulholland 
  To: [ISAserver.org Discussion List] 
  Sent: Thursday, January 10, 2002 16:44
  Subject: [isalist] allowing incoming icmp


  http://www.ISAserver.org


   

  Im new to isa

   

  How do I make a rule that lets my firewall accept icmp packets from an 
address on port 25 (just one address).

   

  I am doing this because my mail will not send and I have had experience with 
it before with an old firewall and it fixed the problem. However 

  I am not sure how or where to do this in isa. Help would be appreciated

   

  Duke

  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: