Strange Routing with Server 2003

Hi All!

Check this out:

I got a Server 2003 Enterprise Server with SP1 running in a classroom
environment. Acting as a Active Directory Server. DNS is running
obviously but no DHCP and no Routing and Remote Access.

Network configuration is following:

IP-ADDRESS 192.168.3.200
Subnetmask: 255.255.255.0
Default-Gateway 192.168.3.200
DNS-Server 192.168.3.200

Everything connected to a catalst 2900 switch

The gateway to the Internet is the 192.168.3.250

But for some strange reason I can still surf the Internet on the Domain
Controller. Isn't that strange or am I missing something
here.....??????

I checked all settings on the DC but how can i get to the Internet with
192.168.3.200 as the Default Gateway address and this is also the
Address of the DC if the Gateway to the internet is 192.168.3.250.

I can put in both addresses as the gateway 192.168.3.250 and
192.168.3.200.

192.168.3.250 is our Cisco Router.

Thanks in advance


CU
Pashiib

It's probably proxy arp. It should be turned off since it's generally viewed
as a security vulnerability.

More info on proxy arp-
http://www.cisco.com/warp/public/105/5.html


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> Hi All!
>
> Check this out:
>
> I got a Server 2003 Enterprise Server with SP1 running in a classroom
> environment. Acting as a Active Directory Server. DNS is running
> obviously but no DHCP and no Routing and Remote Access.
>
> Network configuration is following:
>
> IP-ADDRESS 192.168.3.200
> Subnetmask: 255.255.255.0
> Default-Gateway 192.168.3.200
> DNS-Server 192.168.3.200
>
> Everything connected to a catalst 2900 switch
>
> The gateway to the Internet is the 192.168.3.250
>
> But for some strange reason I can still surf the Internet on the Domain
> Controller. Isn't that strange or am I missing something
> here.....??????
>
> I checked all settings on the DC but how can i get to the Internet with
> 192.168.3.200 as the Default Gateway address and this is also the
> Address of the DC if the Gateway to the internet is 192.168.3.250.
>
> I can put in both addresses as the gateway 192.168.3.250 and
> 192.168.3.200.
>
> 192.168.3.250 is our Cisco Router.
>
> Thanks in advance
>
>
> CU
> Pashiib
>

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> IP-ADDRESS 192.168.3.200
> Subnetmask: 255.255.255.0
> Default-Gateway 192.168.3.200
> DNS-Server 192.168.3.200
>
> Everything connected to a catalst 2900 switch
>
> The gateway to the Internet is the 192.168.3.250

You don't make the machine the Gateway of itself, that isn't possible. The
DFG of the machine is supposed to be 192.168.1.250. There is *no* other
option.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------

Greetings,

Another thing to check is if you go to TCPIP properties and click Advance do
you have more then one Gateway listed?

Hope this helps,

--
Louis Vitiello Jr.
------------------------------
MCSE, MCSA, MCP, A+/N+
ERCP XP Pro / Net Concepts



"Phillip Windell" <@.> wrote in message
news:%(E-Mail Removed)...
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) oups.com...
>> IP-ADDRESS 192.168.3.200
>> Subnetmask: 255.255.255.0
>> Default-Gateway 192.168.3.200
>> DNS-Server 192.168.3.200
>>
>> Everything connected to a catalst 2900 switch
>>
>> The gateway to the Internet is the 192.168.3.250
>
> You don't make the machine the Gateway of itself, that isn't possible.
> The
> DFG of the machine is supposed to be 192.168.1.250. There is *no* other
> option.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
> http://download.microsoft.com/downlo...7/ts_rules.doc
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
>

OK maybe I didn't make my self clear enough sorry for that. The problem
is simply if my the gateway to the Internet is 192.168.2.250 which is
the Cisco Router and which is the only route out to the Internet, how
can I then still get to the Internet if I don' use that address as my
default gateway address ?????? Isn't that strange??

-and yes I did check multiple gateway entries in Advanced > TCP/IP
Properties

-and yes I did check the route print command it shows 192.168.2.200 as
the gateway for last resort no other gateway is set

Is there anything else running on the server that somehow sends queries
out to find an alternative path and uses it transparently I wouldn't
surprises knowing Microsoft??????

Regards, Pashiib.

I am sorry I missed typed the Ip Address of course I meant
192.168.3.250 and 192.168.3.200 for the DC.

It cannot be Proxy ARP because I don't use the 192.168.3.250 in the
Default Gateway settings.

@Phillipp:
I know you cannot make urself the Default Gatway thats what my problem
is why can I surf the Internet if I use the 192.168.3.200 instead of
192.168.3.250??????


Regards, Pashiib

You are not understanding proxy arp. It has nothing to do with the server.

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> I am sorry I missed typed the Ip Address of course I meant
> 192.168.3.250 and 192.168.3.200 for the DC.
>
> It cannot be Proxy ARP because I don't use the 192.168.3.250 in the
> Default Gateway settings.
>
> @Phillipp:
> I know you cannot make urself the Default Gatway thats what my problem
> is why can I surf the Internet if I use the 192.168.3.200 instead of
> 192.168.3.250??????
>
>
> Regards, Pashiib
>

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> OK maybe I didn't make my self clear enough sorry for that. The problem
> is simply if my the gateway to the Internet is 192.168.2.250 which is
> the Cisco Router and which is the only route out to the Internet, how
> can I then still get to the Internet if I don' use that address as my
> default gateway address ?????? Isn't that strange??

Have you heard of a CERN Compliant Web Proxy Services?
Have you heard of Winsock Proxys?
Have you heard of Socks Proxys?
......None of which care 2 cents about your Default Gateway setting.

> out to find an alternative path and uses it transparently I wouldn't
> surprises knowing Microsoft??????

What is that supposed to mean???

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------