ICMP and Exchange

Posted on 2005-04-25
Last Modified: 2010-04-08
I added these line into a PIX 515 to prevent it from responding to pings initiated on the outside.  That has worked, but in the process I have prevented one of our other sites from accessing Exchange.  This site connects over a VPN connection to ours.   Once I took the lines out, mail worked fine again for them.  Are there other ICMP types I would need to add for Exchange, or is there a way I can allow all ICMP from that remote site through?

access-list inbound-traffic permit icmp any any unreachable
access-list inbound-traffic permit icmp any any echo-reply
access-list inbound-traffic permit icmp any any time-exceeded
icmp deny any outside
Question by:leerlp
    LVL 79

    Accepted Solution

    You can easily allow icmp from select hosts..

    access-list inbound-traffic permit icmp host a.b.c.d any
    access-list inbound-traffic permit icmp <subnet> <mask> any

    I'm not sure why that one site refuses to "play" with Exchange without icmp, but I'm not an Exchange expert by any means...

    Author Comment

    It looks like that took care of it.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
    The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now