Why ping and traceroute don't work by default through an ISA server firewall.