Ina back-to-back scenario, you have an ISA (or other firewall) separating the DMZ from the Internet. What you use for IP addresses is up to you, but using public IPs in a network that is not reachable from the Internet makes no sense. If ISA is the frontline firewall, you would publish the DMZ servers using the frontline ISA just as if they were in its LAT (because they are). Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: cismic To: [ISAserver.org Discussion List] Sent: Monday, August 20, 2001 9:06 AM Subject: [isalist] DMZ http://www.ISAserver.org In a Back To Back ISA server setup, can the DMZ machines use public address rather then private address? And 2. If they are private address, how is the DNS machine published to the world if your running the primary server in the DMZ for your sites? Thank you, Joseph ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')