Silent blocking of packets, how to debug?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Max Metral (memetral_at_hotmail.com)
Date: 03/12/04

Next message: Thomas W Shinder [MVP]: "Re: OWA timeout through ISA"
Previous message: Helmut Schmalzl: "Isa Connection hangs"
Next in thread: Tony Su: "Silent blocking of packets, how to debug?"
Reply: Tony Su: "Silent blocking of packets, how to debug?"
Messages sorted by: [ date ] [ thread ]

Date: Fri, 12 Mar 2004 16:18:01 -0500

I have UDP packets showing up on the internal interface of ISA, but not
going out on the public net. There are no log events dropped, and there is
a protocol rule setup to allow the packet... Any ideas for where to look as
to why ISA is silently blocking packets?

Sounds like it's time to go buy a WatchGuard box that actually works...

Dispirited,
--Max

Next message: Thomas W Shinder [MVP]: "Re: OWA timeout through ISA"
Previous message: Helmut Schmalzl: "Isa Connection hangs"
Next in thread: Tony Su: "Silent blocking of packets, how to debug?"
Reply: Tony Su: "Silent blocking of packets, how to debug?"
Messages sorted by: [ date ] [ thread ]

Relevant Pages

FWX_E_TCP_NOT_SYN_PACKET_DROPPED on SMTP Connections
... BGP session are sent back through the standby router's ... IP/MAC, the ISA ... firewall won't accept standby's packets (the TCP_SYN ... >SMTP and HTTP packets. ...
(microsoft.public.isa.enterprise)
Re: 2 nics, isa, hw fwall
... you have NAT enabled in ISA, that means that ISA is wrapping the data ... Posting your HW and ISA firewall configurations would ... Components, Mgmt and Mon., Network Monitor Tools). ... analyzing what the TCP/IP packets are doing can be invaluable. ...
(microsoft.public.windows.server.sbs)
IP Options filtering
... This seems to be the last "black area" for me in the ISA 2004 configuration. ... packets with the selected IP options” ... What is a possible reason to prohibit IP options? ... situations in which I should change the default settings? ...
(microsoft.public.isa.configuration)
IP Options filtering
... This seems to be the last "black area" for me in the ISA 2004 configuration. ... packets with the selected IP options” ... What is a possible reason to prohibit IP options? ... situations in which I should change the default settings? ...
(microsoft.public.isa)
Re: Promiscuous mode
... The reason why ISA sees the packets is because the ... router changes the MAC address of the packet to that of the ISA, ... > It will only happen if ISA is plugged into a Hub instead of a Switch. ...
(microsoft.public.isa)