Re: no VPN access from Internet, no pings, nada!
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 2 Oct 2002 15:14:34 -0700
First, thanks for the great feedback; it makes for really fat reviews ..;-)
As to your problems, try paring it down to one thing at a time.
Q1 - Where are you performing the testing from? You can't test external
connections from behind ISA (common mistake).
Q2 - Exactly what rules / filters have you defined?
Q3 - what does the IP...log contain for the each attempt?
Q4 - What do the event logs have from ISA?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the books!
----- Original Message -----
From: "Robert Gonzalez" <robert@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, October 02, 2002 12:14 PM
Subject: [isalist] no VPN access from Internet, no pings, nada!
http://www.ISAserver.org
I need help on something that has probably come up often and i can't
figure out exactly what I am doing wrong .
I have ISA SP1 with 2 nics 1 public 1 internal 192.168.0.x
DNS on ISA has forwarding enabled to ISP DNS and everything works well ,
all clients have no problems going to internet etc.
I have dsl connection with Flowpoint router as gateway on ISA
and the router has all ports open and no NAT.
I have opened ports/enabled filters on ISA for ICMP/ PINg / PCANYWHERE/
VPN using PPTP, and NTP all according to ISASERVER.ORG articles (which
have not failed me!!!).
Why can't i ping from Internet or connect via PCANYWHERE, sync my time
etc.? I can ping router at x.x.x.65 and telnet to it but cannot get to ISA
box at x.x.x.68 or VPN..
Router issue? I should be able to PING even if server is not "published"
right?
i Have followed the wonderful tutorials of Harrison and Shinder (great
how-to's on DNS!!!! I really got a grasp on it!!) But I may be overlooking
something simple......
Help i don't wanna keep visiting the site just to create User Accounts!!!
Using dial-up for VPN is an option but it's a costly one...........
Robert P. Gonzalez
Information Services
Liberty HealthCare System
201-915-2000 ext. 2248
robert@xxxxxxxxxxxxx
Confidentiality Notice: This email message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidentialand privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
