Re: Can not ping the server

Hi J,

Thanks for posting here.

Many thanks for Garry and Susan input.

For your description, I understand that you can not ping the NIC's external
IP address of the server. If I am off base, don't hesitate to let me know.

Based on my research, your question maybe occurred after you configured the
Routing and Remote Access Service (RRAS) as a virtual private network (VPN)
server

To allow pinging to and from the external network adapter, add Inbound and
Outbound filters to the adapter to allow Internet Control Message Protocol
(ICMP) packets to be processed on the adapter.

Please follow the steps to enable ICMP router to resolve the issue.

1. Start the Routing and Remote Access snap-in in MMC.
2. In the left pane, click General under the IP Routing node.
3. In the right pane, right-click the adapter that has been configured as
the external adapter, and then click Properties.
4. Click Inbound Filters.
5. Click Add.
6. In the Protocol box, click ICMP.
7. Click OK, and then click OK.
8. Click Outbound Filters, and then repeat the previous three steps.

More information:
Cannot Ping External Network Adapter After Configuring RRAS as a VPN Server
http://support.microsoft.com/default.aspx?scid=kb;en-us;258030

If you have ISA, the steps may be different. we will have to manually
create a packet filter

1. Create a IP packet filter using the pre-defined "ICMP Ping Query"
definition.
You can do as follows:
ISA Management->the Server->Access Policy->IP Packet filter, right-click
New to create a new packet filter. Follow the wizard and input parameters
as follows:

Specifics of ICMP ping query:
£­Ip protocol: ICMP£­Protocol number: 1£­Direction: Inbound£­Type: Fixed
Type£­Number: 8£­Code: Fixed code£­Number: 0

This will allow all incoming ICMP Ping requests. There is a "ICMP all out"
filter on all ISA servers by default so there in no need to create a filter
to allow ICMP responses out.

Hope this helps. If you have any questions or concerns, please do not
hesitate to let me know. I am always happy to be of further assistance.

Have a nice day!

Best Regards,
Jenny Wu
Microsoft Windows Online Support

>I have Patriot Media cable internet connection going into one of two nic
>cards with a static external ip address. I can not ping that IP address.
>Patriot Media says all ports are open and they are not blocking or
preventing
>me from pinging the server. Yet I have nothing setup on the server that
would
>prevent me from recieving a reply. Can you tell me if I'm missing
something?
>This was not my original setup...I inherited it from another tech. Thanks

.

Relevant Pages

  • Re: Removing ping/icmp from a network
    ... A ping sweep isn't the only way to do network exploration. ... ICMP is a protocol, not a service. ... Security by design is always best, but hiding the presence of a device ...
    (Security-Basics)
  • RE: ICMP (Ping)
    ... You are correct about the kinder and gentler internet. ... network to deal with I might share your opinion. ... I believe you meant ICMP echo ... Subject: ICMP (Ping) ...
    (Security-Basics)
  • Re: help with network problem
    ... I can browser the site using http in all the other computers. ... >While ping serves to test tcp/ip connectivity, ... ICMP messages, delivered in ... >> (Only that website so far). ...
    (Security-Basics)
  • AW: ICMP (Ping)
    ... > someone's going to randomly probe for IP's to just randomly attack. ... radar if someone is just ping sweeping net blocks. ... > annoyed at how many hosts do not respond to ICMP echo. ...
    (Security-Basics)
  • RE: ICMP (Ping)
    ... So blocking ICMP is just a assurance that some of the hackers ... If they are going to attack you randomly, ... > as not going to change because you don't reply to ping requests. ... > No, they'd probe for vulnerabilities by domain or IP, the ping response ...
    (Security-Basics)