Can't ping xp machine

[Mike]

I've got two xp boxes networked together through a switch. The #1 box
is on a company lan, and the #2 box is a lab machine - I want to share
files, but I don't want the #2 machine to be able to see the company
network.

#1 has two network cards in it - one for the company lan that uses
DHCP, the other has it's IP address manually configured to 192.168.1.1.
The #2 box is set to 192.168.1.2. #1 can successfully ping #2, but #2
can't ping #1. Very strange.

I set up a packet capture using Ethereal on machine #1 on the 192
interface. It sees the ICMP packets coming from #2's pings, but it
doesn't respond.

My first thought was that there was something going on with the two
network cards. I ripped the company lan one out, still no dice.

Next I thought there was a firewall issue on #1. The windows firewall
service is not started, so I figured it couldn't be causing it. It
also has Norton installed on it, so I stopped all the norton / symantec
services, killed VPTray, still not able to ping - same symptoms. Now,
I don't know my way around Norton very well, so perhaps there is
something there I'm missing.

I at one point had Sygate Personal firewall installed on #1, but I have
since then uninstalled it - I can't imagine that it would cause this.

It really sounds like a firewall thing since I can see the ICMP
packets, but I don't know where else to check. Any help would be
greatly appreciated.

 

[Robert L [MS-MVP]]

If there is no firewall blocking the traffic, I would check the routing table or use tarcert command to find where ping go to.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
I've got two xp boxes networked together through a switch. The #1 box
is on a company lan, and the #2 box is a lab machine - I want to share
files, but I don't want the #2 machine to be able to see the company
network.

#1 has two network cards in it - one for the company lan that uses
DHCP, the other has it's IP address manually configured to 192.168.1.1.
The #2 box is set to 192.168.1.2. #1 can successfully ping #2, but #2
can't ping #1. Very strange.

I set up a packet capture using Ethereal on machine #1 on the 192
interface. It sees the ICMP packets coming from #2's pings, but it
doesn't respond.

My first thought was that there was something going on with the two
network cards. I ripped the company lan one out, still no dice.

Next I thought there was a firewall issue on #1. The windows firewall
service is not started, so I figured it couldn't be causing it. It
also has Norton installed on it, so I stopped all the norton / symantec
services, killed VPTray, still not able to ping - same symptoms. Now,
I don't know my way around Norton very well, so perhaps there is
something there I'm missing.

I at one point had Sygate Personal firewall installed on #1, but I have
since then uninstalled it - I can't imagine that it would cause this.

It really sounds like a firewall thing since I can see the ICMP
packets, but I don't know where else to check. Any help would be
greatly appreciated.

 

[Chuck]

I've got two xp boxes networked together through a switch. The #1 box
is on a company lan, and the #2 box is a lab machine - I want to share
files, but I don't want the #2 machine to be able to see the company
network.

#1 has two network cards in it - one for the company lan that uses
DHCP, the other has it's IP address manually configured to 192.168.1.1.
The #2 box is set to 192.168.1.2. #1 can successfully ping #2, but #2
can't ping #1. Very strange.

I set up a packet capture using Ethereal on machine #1 on the 192
interface. It sees the ICMP packets coming from #2's pings, but it
doesn't respond.

My first thought was that there was something going on with the two
network cards. I ripped the company lan one out, still no dice.

Next I thought there was a firewall issue on #1. The windows firewall
service is not started, so I figured it couldn't be causing it. It
also has Norton installed on it, so I stopped all the norton / symantec
services, killed VPTray, still not able to ping - same symptoms. Now,
I don't know my way around Norton very well, so perhaps there is
something there I'm missing.

I at one point had Sygate Personal firewall installed on #1, but I have
since then uninstalled it - I can't imagine that it would cause this.

It really sounds like a firewall thing since I can see the ICMP
packets, but I don't know where else to check. Any help would be
greatly appreciated.

Mike,

There are several possibilities here.

First, if you have a Norton / Symantec product involved, you have to either
activate and configure it properly, or un install it. And un installing does
not mean merely running the Add / Remove Programs wizard; with Symantec, you
need to research the product in question at their website, and carefully follow
all procedures given.

Next, you should check for LSP / Winsock / network drivers problems.
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
<http://nitecruzr.blogspot.com/2005/08/re-install-your-network-hardware.html>

Finally, as Robert suggests, there could be a problem with the static route
table.
<http://www.microsoft.com/technet/community/columns/cableguy/cg1201.mspx>