Here's what I've got: WAN IP: 65.168.219.241 SM: 255.255.255.248 DG: 65.168.219.1 DMZ IP: 65.168.219.253 SM: 255.255.255.248 DG: 65.168.219.1 DMZ HOST IP: 65.168.219.254 SM: 255.255.255.248 DG: 65.168.219.253 From the DMZ host (DNS and web server) I am able to ping 65.168.219.253. From ISA I am able to do an nslookup to the DMZ host and resolve any addresses on that machine, but not outside. I created packet filters using predefined protocols of DNS lookup and HTTP server. I enabled IP routing and packet filtering, however I'm not able to get that DMZ host to get past the ISA server. You guys have any ideas? Thanks! ROGER RIGGINS A+, MCSE, CCNA, CCA COMPUTER PROS 319-352-1234 HTTP://WWW.CPROS.NET -----Original Message----- From: Arif, Aboo M [mailto:Aboo@xxxxxxxxxxxxxxxxxx] Sent: Friday, January 18, 2002 11:05 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: DMZ addresses http://www.ISAserver.org U have to use public ips in DMZ. First u have to create two subnets ( DMZ and Unsecured)with your public IP's. Put one IP for the external NIC which is in Unsecured subnet. Your router , Wan Link IP all comes in this subnet(if u have ). And assign the Another Public IP(from DMZ subnet. ) for the DMz NIC .For all servers in dmz u have to assign public ips from this spool. Private IPS are only for the internal NIC. Regards Aboo Arif Emcure InfoTech Ltd. Pune India -----Original Message----- From: Roger Riggins [mailto:riggins@xxxxxxxxx] Sent: Friday, January 18, 2002 10:00 PM To: [ISAserver.org Discussion List] Subject: [isalist] DMZ addresses http://www.ISAserver.org I haven't configured a DMZ with ISA before. Do I assign a public IP to the third NIC and private IPs to the machines in the DMZ? Thanks! ROGER RIGGINS A+, MCSE, CCNA, CCA COMPUTER PROS 319-352-1234 HTTP://WWW.CPROS.NET ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: aboo@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: riggins@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')