Can't Ping or Traceroute to Lan

[pkailas]

We have a new Frame-Relay connection. We can bring up web sites on our Ethernet side from the internet. However, we cannot ping the servers from the outside. We can ping the Ethernet interface as well as the serial interface from outside.

We do NOT have any access-lists or groups configured. So we are not filtering anything that I can think of.

Does anyone know why we wouldn't be able to ping any machines that are connected to our Ethernet interface, yet be able to bring up web sites?

 

[tschouten]

Uhm, question on your definition of, "from outside", are you saying this is a machine completely un-connected to your existing network?

If so, unless you supplied the servers with an ip address from your ISP. I would say you shouldn't be able to ping or trace route them from the outside. That is if they are using private addresses 10.0.0.0 /8 , 172.16.0.0 /12 192.168.0.0 /16.

If you are using, "From outside", in terms of from segment A Frame-Relay to segment B Frame-Relay. Then the problem may be as simple as bad routing design, or bad addressing schema.

I know this doesn't explain how to fix your problem. However, with a little more information from you it would be easier. If you can post the configs and give a definitive example of the problem someone could narrow down on the problem a little better.

 

[pkailas]

I'm going to strangle our new Network Admin. He put a personal firewall on the machines which blocked the pinging. The router is configured properly!

Thanks for your reply though.

 

[tschouten]

Well that would deffinitely cause a problem!

 

[dx1]

>I'm going to strangle our new Network Admin. He put a personal firewall on the machines which blocked the pinging.

Actually, he did his job correctly. That would of stopped the nachi/blaster worm that was spreading around recently. I wish we had admins like that. They usually just install it with all the defaults on.

 

[pkailas]

Heh, but we have a Firebox as our network firewall. He had some symantec piece of junk on this computer too. He didn't even know it! I was called into this job after HE couldn't figure out why the circuit didn't seem to work!

Arrgh.