RRAS Filtering Question

I have a server that is win 2000, and has 2 NIC cards.
Under RRAS-->IP Routing --> General it shows these screenshots:

www.songwave.com/ttemp/rras1.jpg
www.songwave.com/ttemp/rras2.jpg
www.songwave.com/ttemp/rras3.jpg
www.songwave.com/ttemp/rras4.jpg

What I'd like to know is what exactly is this doing to the server?   Are these settings only for RRAS connections or are they for everything going thru the server?  I also have ISA on this server and it works fine.  I can download MP3's, I can Ping, browse, FTP, etc.  If these filters say "block everything EXCEPT" then how can ISA be working?  Can I safely delete all these settings and what do they have to do with (if anything) the actual traffic coming and going through the server?
bctekAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

TheCleanerCommented:
The only one that is showing as "filtered" is the Internet conection.  It's the one that is being used for PPTP and IPSEC VPN traffic, and therefore is limited to the ports and protocols used for those services.

My server runs ISA 2004 and has no "filtered' enabled connections.  It uses ISA rules to allow/block PPTP/IPSEC traffic.  There is a "remote access policies" in RRAS and my first entry is ISA default policies.

are you running ISA 2004?  Did you setup ISA to allow VPN traffic?  Seems like maybe someone setup the RRAS server either before ISA was on there to allow VPN traffic, or locked it down even further once it was setup.
bctekAuthor Commented:
yea this server predates me.  Its ISA 2000 and was setup before I arrived.  So does it appear to you that these filters are serving any purpose at all?
bctekAuthor Commented:
yes, ISA is setup to allow VPN traffic
TheCleanerCommented:
It looks like it is designed that way to prevent non-VPN traffic through that particular connection.

It "shouldn't" hurt anything by getting rid of the filter, as the filter really just restricts, not opens...so by getting rid of it, you really are just allowing more traffic across it as far as RRAS is concerned.

I'm wondering if this may shed some light on it:  http://support.microsoft.com/default.aspx?scid=kb;en-us;169548&sd=tech

It's possible that if the server was used for VPN prior to ISA that would explain the filter.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TheCleanerCommented:
Thanks for the points...did you disable the filter?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.