how is it possible: no ping but have access??

J

Jonny Two Shoes

Expert Member
Joined
Nov 13, 2006
Messages
4,542
Reaction score
17
Location
Gauteng
Just a quick question as Im very curious:

At work we have a leased line to Chicago Corporate. No direct line at all. It all goes through a proxy in Chicago apparently.

How come I cannot ping any website address local or International but still have access to them...thats a little messed up to me ??

I tried from quite a few workstations. Same result.

I tried to help a poster here on mybroadband just now doing a tracert to a local site and I get destination host unreachable. However I can still get into the site no problems.

Now I know that I was definately able to do this before when I started here but for about a month now I picked this up. Surely its a physical impossibility to not be able to ping but you can still access the website? What could have changed?? :)
 
I see. I take it ryder that said firewall will be the one at proxy in Chicago...obviously they must have changed something there? Disabled icmp as such? :)

I don't recall seeing ICMP on a firewall setting before so could it be a firewall on our routers\relays here??
 
Last edited:
Looks like they have filtered out ICMP so reduce risks of being hacked. A silly way to go about it, but each to their own. It does help cut down on things like DDOS attacks.

SAIX also filter out ICMP, try a couple of their game servers, 196.4.79.20 or 196.4.79.28
 
Last edited:
Or it could be that the proxy itself does not forward ICMP requests as well. If you have no gateway, and only use the proxy in IE settings, it would make sense. Basically, if your network does not have a line to the Internet, then pinging will not work. If it resolves an IP address, then it is the firewall, most likely on the proxy itself, that is blocking ICMP. Many corporates to it these days, in order to protect their expensive line from DOS attacks
 
You should get some results from a trace route, between your workstation and the proxy / Firewall

As the example below:


1 1 ms 1 ms 1 ms ACCE-0011-FG.ascenso.co.za [192.168.59.1]
2 24 ms 25 ms 26 ms 165.149.200.73
3 29 ms 29 ms 32 ms 165.149.186.162
4 30 ms 30 ms 29 ms FW3.ascenso.co.za [192.168.200.9]
5 31 ms 33 ms 31 ms cs-sov32-00b-VLAN10.ascenso.co.za [192.168.0.1]
6 34 ms 34 ms 34 ms fw2-vmx1.ascenso.co.za [192.168.0.32]

From my PC to the firewall.
 
Is that safe to post !!DV!! ? Aren't you afraid of getting hacked? ;)
 
Okay cool, you would know ;) I'm just checking :D ;) :p heheheh
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X