Is my routing table right?

postings_at_alexshirley.com
Date: 01/20/05


Date: 20 Jan 2005 08:26:36 -0800

Hi

I'm running ISA Server 2000 (SP2) with Win 2K Server (SP4). This box
is our LAN's gateway to the outside world from our internal LAN. It is
pretty much a "bog standard" set up. The internal network card
links to our internal network, and the external network card links to
an ADSL router. The sole purpose of the box is a firewall, a proxy and
an SMTP router.

My Internal LAT is set up OK, and I've configure my NIC's as per
the recommendations. Functionally ISA is working fine as a proxy,
clients are picking it up.

But there is a problem. It takes a very long time to ping or connect to
anything on the internal network from the server (it looks like the
connection waits for a timeout). I'm wondering if there is something
wrong with my routing table (below)?

My hunch is that the default gateway could be getting in the way here.
I didn't put it in, and neither NIC cards have this shown under
Network and dialup connections TCP/IP properties. I can't seem to
remove the gateway anyway. It got there by me putting in the persistent
routing address of 0.0.0.0 which makes everything work, but somehow
bungs in a default gateway setting (should this happen?).

Note the external NIC has the ISP's DNS addresses allocated. The
internal network does not have a DNS allocated (I believe this is the
recommendation with ISA?)

Does anybody know what I need to do here, and the syntax of the ROUTE
command I need to make any alterations?

Could you please review the below routing table; for my peace of mind
anyway?

Many thanks!

Key:
[INT NIC] = Primary IP address allocated to the Internal NIC
[INT NIC2] = A secondary IP address allocated to the NIC
[EXT NIC] = Primary External network card IP address
[EXT NIC2] = Secondary External network card IP address (SMTP server)
[NW Address] = Network address (First IP Address allocated to me by my
ISP)
X = Used to cover up any other sensitive info.

Active Routes:
Dest Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 [ROUTER IP] [EXT NIC] 1
[INT NIC] 255.255.255.0 [INT NIC] [INT NIC] 1
[INT NIC] 255.255.255.255 127.0.0.1 127.0.0.1 1
[INT NIC2] 255.255.255.255 127.0.0.1 127.0.0.1 1
X.255.255.255 255.255.255.255 [INT NIC] [INT NIC] 1
[NW Address] 255.255.255.248 [EXT NIC] [EXT NIC] 1
[EXT NIC] 255.255.255.255 127.0.0.1 127.0.0.1 1
[EXT NIC2] 255.255.255.255 127.0.0.1 127.0.0.1 1
X.255.255.255 255.255.255.255 [EXT NIC] [EXT NIC] 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 224.0.0.0 [INT NIC] [INT NIC] 1
224.0.0.0 224.0.0.0 [EXT NIC] [EXT NIC] 1
255.255.255.255 255.255.255.255 [EXT NIC] [EXT NIC] 1
Default Gateway: [ROUTER IP]
================================================================
Persistent Routes:
NW Address Netmask Gateway Metric
0.0.0.0 0.0.0.0 [ROUTER IP] 1

Many thanks again!

Alex



Relevant Pages

  • n00b ipf/ipnat questions
    ... i've been trying to set up an ipf/ipnat gateway machine, to protect an internal network of two machines: ... pass out quick on xl0 proto tcp from any to any keep state ...
    (FreeBSD-Security)
  • Re: Still having firewall issues
    ... How many subnets are in your SBS internal network? ... > 4) Click Add Adapter and then select Server Local Area Connection. ... No default gateway difined. ... > to the same internal default gateway address as the ISA Server computer. ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange 2003 does not receive external mail
    ... was the one specified on the internal network. ... gateway for the external interface. ... I'm on our internal network and I telnet to the external address, ... Transport shows generates nothing in the event logs. ...
    (microsoft.public.exchange.connectivity)
  • 2 Network Cards
    ... gateway. ... >I have to set-up my Directors laptop and he requires ... access to the internal network on 1 network card which I ... go via our server a second network card connected straight ...
    (microsoft.public.win2000.networking)
  • Re: Something new?
    ... Would you be looking into something similar to a Checkpoint client auth, ... > some type of gateway or method for setting up an OS to ... > ports on the internal network would be blocked until ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
    (Security-Basics)