Re: IP IPSEC Policy blocking ping

Basically block all IP means block everything [other than default exemptions
such as broadcast, kerberos, IKE] ] and if you look at the protocols
available for selection you will see ICMP available. Create a permit rule
for the ICMP by selecting ICMP under protocol type and you should be good to
go. Keep in mind in ipsec that specific rules override general rules such as
block all. --- Steve


"Zakir" <ZakirD@xxxxxxxxx> wrote in message
news:1143085565.649424.222170@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi all,
I have an IPSEC policy setup on a windows 2000 server. When I turn on
the "Block all IP Traffic" filter on, I am no longer able to ping
machines and they are no longer able to ping me. I tried allowing port
7 for echo, but that didn't seem to fix the problem. The odd thing is
that normally ping is an ICMP command, not an IP command and IPSEC even
has an option called block all ICMP traffic that is seperate from BL***
all IP traffic. Any ideas if there is an odd port I need to open or
something like this?

Thank you!

Zakir



.