cant ping or connect using terminal services

Question please.
i have a win2003 server with public ip.
i cannot ping or connect to this server using anything
outside of my isp's rounter. If I assign that ip address
to a win2k workstation i can ping it fine anywhere in the
world. What setting in server 2003 is preventing me from
pinging and thus connecting via terminal services.
Thank you




Ken

for the security reason, 2003 block the ping. you may want to check NAT
settings.

--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Ken" <(E-Mail Removed)> wrote in message
news:035101c3bf51$da89b560$(E-Mail Removed)...
> Question please.
> i have a win2003 server with public ip.
> i cannot ping or connect to this server using anything
> outside of my isp's rounter. If I assign that ip address
> to a win2k workstation i can ping it fine anywhere in the
> world. What setting in server 2003 is preventing me from
> pinging and thus connecting via terminal services.
> Thank you
>
>

Check the firewall settings.

"Ken" <(E-Mail Removed)> wrote in message
news:035101c3bf51$da89b560$(E-Mail Removed)...
> Question please.
> i have a win2003 server with public ip.
> i cannot ping or connect to this server using anything
> outside of my isp's rounter. If I assign that ip address
> to a win2k workstation i can ping it fine anywhere in the
> world. What setting in server 2003 is preventing me from
> pinging and thus connecting via terminal services.
> Thank you
>
>

I am going around the firewall.
Thanks
>-----Original Message-----
> Check the firewall settings.
>
>"Ken" <(E-Mail Removed)> wrote in message
>news:035101c3bf51$da89b560$(E-Mail Removed)...
>> Question please.
>> i have a win2003 server with public ip.
>> i cannot ping or connect to this server using anything
>> outside of my isp's rounter. If I assign that ip
address
>> to a win2k workstation i can ping it fine anywhere in
the
>> world. What setting in server 2003 is preventing me
from
>> pinging and thus connecting via terminal services.
>> Thank you
>>
>>
>
>
>.
>

I am able to ping ok from the same subnet.
and i can ping the ip when i use a 2000 workstation so
the isp is not blocking.
thanks
>-----Original Message-----
>for the security reason, 2003 block the ping. you may
want to check NAT
>settings.
>
>--
>For more and other information, go to
http://www.ChicagoTech.net
>
>Don't send e-mail or reply to me except you need
consulting services.
>Posting on MS newsgroup will benefit all readers and you
may get more help.
>
>Robert Lin, MS-MVP, MCSE & CNE
>Networking, Internet, Routing, VPN, Anti-Virus, Tips &
Troubleshooting on
>http://www.ChicagoTech.net
>This posting is provided "AS IS" with no warranties.
>
>"Ken" <(E-Mail Removed)> wrote in message
>news:035101c3bf51$da89b560$(E-Mail Removed)...
>> Question please.
>> i have a win2003 server with public ip.
>> i cannot ping or connect to this server using anything
>> outside of my isp's rounter. If I assign that ip
address
>> to a win2k workstation i can ping it fine anywhere in
the
>> world. What setting in server 2003 is preventing me
from
>> pinging and thus connecting via terminal services.
>> Thank you
>>
>>
>
>
>.
>

Yes, if you can ping another workstation in your subnet, the ISP is
not blocking (and I wonder if any ISP blocks ICMP echo requests.)

Have you enabled Firewall on the interface which gives the server the public
IP?
Are you using Internet Connection Sharing or NAT.

Anyways I will give you some steps, even if you don't use ICS, do following:
In the properties of the network interface which gives your public ip,
click on Advance Tab, and see if Firewall is enabled there.

If it is enabled: (Don't enable it now, do following)
Click on "Settings".
There click on ICMP tab.
Make sure that Allow incoming echo request check box is enabled.
Save settings by clicking on "Apply" / "OK" buttons.
Close the network properties.
Now try pinging from outside your ISP's router.

If it is not enabled:
Close network properties.
Start ->Program ->Administrative tools -> Routing & Remote Access
There find IP routing, expand it and click on 'NAT / Basic Firewall'
On the right side find the network interface which gives public IP to your
server.
Right click on it and select properties.
There click on ICMP tab.
Make sure that Incoming echo request check box is enabled.
Save settings by clicking on "Apply" / "OK" buttons.
Now try pining from outside your ISP's router.

With this it must work, if it doesn't ... well .. I don't know!

Sharad

"Ken" <(E-Mail Removed)> wrote in message
news:0d0801c3bff9$f08c3bf0$(E-Mail Removed)...
> I am able to ping ok from the same subnet.
> and i can ping the ip when i use a 2000 workstation so
> the isp is not blocking.
> thanks
> >-----Original Message-----
> >for the security reason, 2003 block the ping. you may
> want to check NAT
> >settings.
> >
> >--
> >For more and other information, go to
> http://www.ChicagoTech.net
> >
> >Don't send e-mail or reply to me except you need
> consulting services.
> >Posting on MS newsgroup will benefit all readers and you
> may get more help.
> >
> >Robert Lin, MS-MVP, MCSE & CNE
> >Networking, Internet, Routing, VPN, Anti-Virus, Tips &
> Troubleshooting on
> >http://www.ChicagoTech.net
> >This posting is provided "AS IS" with no warranties.
> >
> >"Ken" <(E-Mail Removed)> wrote in message
> >news:035101c3bf51$da89b560$(E-Mail Removed)...
> >> Question please.
> >> i have a win2003 server with public ip.
> >> i cannot ping or connect to this server using anything
> >> outside of my isp's rounter. If I assign that ip
> address
> >> to a win2k workstation i can ping it fine anywhere in
> the
> >> world. What setting in server 2003 is preventing me
> from
> >> pinging and thus connecting via terminal services.
> >> Thank you
> >>
> >>
> >
> >
> >.
> >

Hello Sharad,
thanks for your comments. I am giving it a try right now.
the fire wall was turned off.
thanks

Ken

>-----Original Message-----
>Yes, if you can ping another workstation in your subnet,
the ISP is
>not blocking (and I wonder if any ISP blocks ICMP echo
requests.)
>
>Have you enabled Firewall on the interface which gives
the server the public
>IP?
>Are you using Internet Connection Sharing or NAT.
>
>Anyways I will give you some steps, even if you don't
use ICS, do following:
>In the properties of the network interface which gives
your public ip,
>click on Advance Tab, and see if Firewall is enabled
there.
>
> If it is enabled: (Don't enable it now, do
following)
> Click on "Settings".
> There click on ICMP tab.
> Make sure that Allow incoming echo request check
box is enabled.
> Save settings by clicking on "Apply" / "OK"
buttons.
> Close the network properties.
> Now try pinging from outside your ISP's router.
>
>If it is not enabled:
>Close network properties.
>Start ->Program ->Administrative tools -> Routing &
Remote Access
>There find IP routing, expand it and click on 'NAT /
Basic Firewall'
>On the right side find the network interface which gives
public IP to your
>server.
>Right click on it and select properties.
>There click on ICMP tab.
>Make sure that Incoming echo request check box is
enabled.
>Save settings by clicking on "Apply" / "OK" buttons.
>Now try pining from outside your ISP's router.
>
>With this it must work, if it doesn't ... well .. I
don't know!
>
>Sharad
>
>"Ken" <(E-Mail Removed)> wrote in
message
>news:0d0801c3bff9$f08c3bf0$(E-Mail Removed)...
>> I am able to ping ok from the same subnet.
>> and i can ping the ip when i use a 2000 workstation so
>> the isp is not blocking.
>> thanks
>> >-----Original Message-----
>> >for the security reason, 2003 block the ping. you may
>> want to check NAT
>> >settings.
>> >
>> >--
>> >For more and other information, go to
>> http://www.ChicagoTech.net
>> >
>> >Don't send e-mail or reply to me except you need
>> consulting services.
>> >Posting on MS newsgroup will benefit all readers and
you
>> may get more help.
>> >
>> >Robert Lin, MS-MVP, MCSE & CNE
>> >Networking, Internet, Routing, VPN, Anti-Virus, Tips &
>> Troubleshooting on
>> >http://www.ChicagoTech.net
>> >This posting is provided "AS IS" with no warranties.
>> >
>> >"Ken" <(E-Mail Removed)> wrote in message
>> >news:035101c3bf51$da89b560$(E-Mail Removed)...
>> >> Question please.
>> >> i have a win2003 server with public ip.
>> >> i cannot ping or connect to this server using
anything
>> >> outside of my isp's rounter. If I assign that ip
>> address
>> >> to a win2k workstation i can ping it fine anywhere
in
>> the
>> >> world. What setting in server 2003 is preventing me
>> from
>> >> pinging and thus connecting via terminal services.
>> >> Thank you
>> >>
>> >>
>> >
>> >
>> >.
>> >
>
>
>.
>

Hello Sharad,
I am sad that it did not work.
but thanks

Ken

>-----Original Message-----
>Hello Sharad,
>thanks for your comments. I am giving it a try right now.
>the fire wall was turned off.
>thanks
>
>Ken
>
>>-----Original Message-----
>>Yes, if you can ping another workstation in your
subnet,
>the ISP is
>>not blocking (and I wonder if any ISP blocks ICMP echo
>requests.)
>>
>>Have you enabled Firewall on the interface which gives
>the server the public
>>IP?
>>Are you using Internet Connection Sharing or NAT.
>>
>>Anyways I will give you some steps, even if you don't
>use ICS, do following:
>>In the properties of the network interface which gives
>your public ip,
>>click on Advance Tab, and see if Firewall is enabled
>there.
>>
>> If it is enabled: (Don't enable it now, do
>following)
>> Click on "Settings".
>> There click on ICMP tab.
>> Make sure that Allow incoming echo request
check
>box is enabled.
>> Save settings by clicking on "Apply" / "OK"
>buttons.
>> Close the network properties.
>> Now try pinging from outside your ISP's router.
>>
>>If it is not enabled:
>>Close network properties.
>>Start ->Program ->Administrative tools -> Routing &
>Remote Access
>>There find IP routing, expand it and click on 'NAT /
>Basic Firewall'
>>On the right side find the network interface which
gives
>public IP to your
>>server.
>>Right click on it and select properties.
>>There click on ICMP tab.
>>Make sure that Incoming echo request check box is
>enabled.
>>Save settings by clicking on "Apply" / "OK" buttons.
>>Now try pining from outside your ISP's router.
>>
>>With this it must work, if it doesn't ... well .. I
>don't know!
>>
>>Sharad
>>
>>"Ken" <(E-Mail Removed)> wrote in
>message
>>news:0d0801c3bff9$f08c3bf0$(E-Mail Removed)...
>>> I am able to ping ok from the same subnet.
>>> and i can ping the ip when i use a 2000 workstation so
>>> the isp is not blocking.
>>> thanks
>>> >-----Original Message-----
>>> >for the security reason, 2003 block the ping. you may
>>> want to check NAT
>>> >settings.
>>> >
>>> >--
>>> >For more and other information, go to
>>> http://www.ChicagoTech.net
>>> >
>>> >Don't send e-mail or reply to me except you need
>>> consulting services.
>>> >Posting on MS newsgroup will benefit all readers and
>you
>>> may get more help.
>>> >
>>> >Robert Lin, MS-MVP, MCSE & CNE
>>> >Networking, Internet, Routing, VPN, Anti-Virus, Tips
&
>>> Troubleshooting on
>>> >http://www.ChicagoTech.net
>>> >This posting is provided "AS IS" with no warranties.
>>> >
>>> >"Ken" <(E-Mail Removed)> wrote in message
>>> >news:035101c3bf51$da89b560$(E-Mail Removed)...
>>> >> Question please.
>>> >> i have a win2003 server with public ip.
>>> >> i cannot ping or connect to this server using
>anything
>>> >> outside of my isp's rounter. If I assign that ip
>>> address
>>> >> to a win2k workstation i can ping it fine anywhere
>in
>>> the
>>> >> world. What setting in server 2003 is preventing me
>>> from
>>> >> pinging and thus connecting via terminal services.
>>> >> Thank you
>>> >>
>>> >>
>>> >
>>> >
>>> >.
>>> >
>>
>>
>>.
>>
>.
>