Damn ping

[ngrayson]

Guys,

Most of the problems I was experiencing have gone with the final release of 6.0 with the exception of not being able to ping the internet.

I have some screen shots of various things which I could send but here is a summary.

If I try to ping www.demon.net, the following happens.

We dial out correctly and the DNS lookup is sucessfull and returns the IP address but I get failures.

3 similtanious time stamped events occur in wingate.

The history windows shows a nat translation to/from that IP address.
The sytem window shows an authentication failure on that NAT for that user.
The firewall log shows a rejection with a source address of the demon webs site and a destination address of my ISP account (i.e. not the end computer but the shared IP address).

My take on this is that its blocking the imbound response.

My port restrictions are internet to wingate PC 1-65535 deny for UDP and TCP.

None of the config has changed so why has it suddenly stopped working. It did work OK in RC1.

Regards
Neil

Whats going on chaps ??

[adrien]

Hi

Sounds like some policy is trashing the ICMP hash entry, so that when the reponse packet comes back from the server, the hash entry is gone, and so the return packet is firewalled.

this is consistent with you seeing an authentication failure message in the system messages window.

Check the policies tab in your Extended networking configuration. Make sure you aren't requiring users to be authenticated for ping or anything like that.

Adrien

[ngrayson]

Hi Adrien,

Bulls eye mate!

The default rights were set to "is ignored", I have set this to may be used instead and it now works.

I'm still confussed though and maitain that you have to have changed the way this is used because I dont use policies so they have been set like that since I installed my fuirst version ... whenever and its always worked.

Anyway, problem seems to be sorted, the final build release is much more stable, it does seem to be quicker and at this point, I'm a happy man. Lets ee what happens long term.

Well done to eveyone, I think that V6 particularly th GUI is much better.