Re: allowing incoming icmp
- From: "Greg Mulholland2" <duke@xxxxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 11 Jan 2002 16:16:14 +1100
Yeah that's probably what it is, the situation is that I cant send mail
because the isp's mail server sends icmp packets to me when I hit send
on port 25 (so the firewall log tells me). The firewall is blocking
these obviously, having done nothing, how do I enable this to pass or
occur so that my mail sends.
Remembering I am new to isa and know not much other than orginal install
As it is the isp's smtp server, I would have no idea if they are a
secure nat client
Protocol rules in place, I am not even sure
Thanks for your help btw.
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Saturday, January 12, 2002 3:13 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: allowing incoming icmp
http://www.ISAserver.org
ICMP doesn't have a "port"; it's a whole different layer in the TCP/IP
stack.
You may be referring to a "keepalive ping", where a switch / router will
occasionally make a TCP connection on a given port to verify application
state.
This is fairly common in load-balancing hardware..
Is your SMTP server a secureNAT client?
Do you have the correct protocol rules in place?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: Greg Mulholland <mailto:duke@xxxxxxxxxxxxxx>
To: [ISAserver.org <mailto:isalist@xxxxxxxxxxxxx> Discussion List]
Sent: Thursday, January 10, 2002 16:44
Subject: [isalist] allowing incoming icmp
http://www.ISAserver.org
Im new to isa
How do I make a rule that lets my firewall accept icmp packets from an
address on port 25 (just one address).
I am doing this because my mail will not send and I have had experience
with it before with an old firewall and it fixed the problem. However
I am not sure how or where to do this in isa. Help would be appreciated
Duke
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
duke@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
