Can ping everything except the router

[MJNSBF]

Hello -

I have a windows Me system that is behind a firewall. It pings everything behind the firewall just fine, and it pings everything outside the firewall just fine, except for the router where our t-1 comes in. when placed in front of the firewall, it works fine. So I thought it was a firewall issue. But, I changed the ip address to a known working ip, and it still did not work.

I have uninstalled tcp/ip and reinstalled it to no avail. I am just short of upgrading to windows 2000 in hopes of it working. Any ideas on what may be causing this type of problem?

 

[TheOldMan346]

Are you sure the router is configured to respond to a ping? Border routers [where internet meets intranet] are often configured to not respond for security reasons.

Or perhaps the firewall is blocking it.

The Old Man

 

[Grenage]

Indeed, our router at work is set to not pong when pinged, anyone running a scanner across an IP range won't detect you then, since no responce assumes no machine (at least this is how I understand it)

 

[MJNSBF]

No, I don't think that is not the problem. Every pc can ping the router except for this one. When it is placed in front of the firewall, it works fine. I thought it might be the firewall blocking it, but when I give it an ip address of a pc that is working perfectly, it still doesn't work. Since it isn't reaching the router, I can't get on the web.

Thanks for the suggestions.

M

 

[Grenage]

Ok so you want to get on the web. The gateway and DNS is all configured correctly ?

 

[MJNSBF]

Yes, the gateway and DNS are all configured correctly. I have even triple checked that, because that was my first thought, too. (I even brought in 2 other co-workers for assistance, and they are baffled as well.) It does seem logical that this is where the issue lies but I have checked all that I know to check for this (tcp/ip properties and statically assigned ip, subnet mask, gateway and dns info)....

 

[TheOldMan346]

MJNSBF,

When you say the machine pings everything outside the firewall fine are you referring to devices in the DMZ or the internet. There is a big difference. I am assuming you mean other devices in the DMZ since you also say it can not get on the web.

Just to confirm, you say that the machine CAN ping ALL devices EXCEPT the router REGARDLESS OF WHERE IT IS IN RELATION TO THE FIREWALL. Is that correct? When it is in front of the firewall, it CAN ping the router as well as everything else. Is that correct? Sounds a little fishy but perhaps I am misunderstanding. Where are the subnets. Is the DMZ on a different subnet? What routes have been implemented/permitted on the firewall?

As grenage mentions, the default gateway can contribute to this but if what you say above is true, that does not sound likely. You would have other difficulties pinging devices also. Are there any routes set on this computer? Open a command prompt/DOS window and type "route print" without the quotes. Does anything look unusual or not the same as other computers there? Try resetting the routes and flushing the arp cache.

Hope that helps.
The Old Man

 

[MJNSBF]

The Old Man,

Yes, all of your assumptions are correct....I know it sounds weird! And the DMZ is on the same subnet. There is only one static route on the firewall, which is the route to the router. Works fine for all other pc's behind it. I will go check the route tables for this darn pc and try what you suggested. I will let you know the outcome.

MJNSBF

 

[MJNSBF]

Ok..... I have reset the routes (although they were the same as the neighboring, working pc) and flushed the arp cache (on both the pc and the firewall). No workie......

Upgrade?