icmp reply for in icmp request for out icmp time out for in then you can ping and tracert other host ,and the other host can't ping your ip >>> phillen@xxxxxxxxx 01/17/02 12:47am >>> http://www.ISAserver.org I do believe this is a default behavior of ISA - which is not entirey bad... I woud rather have someone ping it and get no reply, vs letting them know its there. I am sure if you want it to reply - you would have to configure a packet filter to do so, but not sure why would want to. Just my 2 cents -----Original Message----- From: Gopi tadi [mailto:gopi.tadi@xxxxxxxxxxxxxxx] Sent: Wednesday, January 16, 2002 8:44 AM To: [ISAserver.org Discussion List] Subject: [isalist] unable to ping http://www.ISAserver.org Hi, From external world no one is able to ping to my isa server. But they r able to ping to my routers serial interface. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: phillen@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: msin@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')