Welcome to ISAserver.org

0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> 0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED

Page: [1]

Message

<< Older Topic Newer Topic >>

0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED - 17.Dec.2005 10:21:30 PM

dinodod

Posts: 100
Joined: 1.Oct.2004
Status: offline

Ok, so I have my 2 NIC ISA up and running as a back end firewall. My Lan & perimeter networks are defined and a routing relationship has been defined bi-directionally. My 1st rule allows FULL access to/from each network.

My server vlan is in the perimiter network and my WAN NIC is in the server network

Yet I can not PING anything from the ISA Server in the LAN & Perimet network yet external hosts are ok?

I can VPN into the network and ping the WAN NIC and even Remote Desktop to it just fine.

I'm going thru your article on setting up a perimeter network but why would my setup give me this error:
0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED? Nothing on Google :(

I then added the DNS entries to the WAN NIC as well and still nothing.

I'm in a NT4 domain so Netbios & WINS resolution is a must!
My server & ISA are both fully updated.

Thanks!

Post #: 1

Featured Links*

RE: 0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED - 17.Dec.2005 10:54:03 PM

dinodod

Posts: 100
Joined: 1.Oct.2004
Status: offline

Ok, I think I see the problem but I don't know how to resolve.

LAN -- ISA --     Perimeter    -- External
PCs -- FW -- Corp / Servers -- Internet

I'm trying to ping a device in the LAN network from the ISA Server. So it has to go to the Perimter network where the DNS server sits and then pass thru ISA into the LAN Network to resolve the ping. Yet somehow ISA is refusing that connecion and drops the Netbios Name Server & Ping requests.

Dest IP             Protocol                        Action                  Source Network   Dest. Network     Result Code
192.xxx.xxx.xxx    NetBios Name Service    Denied Connection    Local Host            Corp LAN        0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED

172.xxx.xxx.xxx    Ping                            Denied Connection    Local Host    Internal    0xc004002d FWX_E_UNREACHABLE_ADDRESS

(in reply to dinodod)

Post #: 2

RE: 0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED - 17.Dec.2005 11:13:19 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Did you enable them in the system policy?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to dinodod)

Post #: 3

RE: 0xc0040030 FWX_E_OUTBOUND_PATH_THROUGH_DROPPED - 18.Dec.2005 10:49:44 AM

dinodod

Posts: 100
Joined: 1.Oct.2004
Status: offline

I reconfigured the policies to include the Corp Lan

I came across this article on complex networks and it seems I need to configure my routes as they are not listed.

In my network, I have multiple VLANS, each with thier own default gateway. Is there any special I need to know about with this type of network?

I keep getting this error:
route add -p 172.28.61.0 mask 255.255.240.0 172.28.48.1
The route addition failed: The specified mask parameter is invalid. (Destination & Mask) != Destination.

Any thoughts?

< Message edited by dinodod -- 19.Dec.2005 5:52:38 PM >

(in reply to LLigetfa)

Post #: 4