You've created the DMZ wrong; the netmask needs to be a subset, not a superset of the external IP range. Use a larger (.240, .248, .252), not smaller netmask. Also, ditch the default gateway in the DMZ NIC. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: Мостовой Максим To: [ISAserver.org Discussion List] Sent: Thursday, January 24, 2002 06:38 Subject: [isalist] DMZ need help http://www.ISAserver.org DMZ doesnot work =( External NIC 195.34.45.15 Mask 255.255.255.224 GW 195.34.45.1 Dmz NIC 195.34.45.193 Mask 255.255.255.192 GW 195.34.45.1 DMZ Computer NIC 195.34.45.194 Mask 255.255.255.192 Gw 195.34.45.193 Packet Filter on ISA Protocol: Any Direction: Both This computer (on the perimeter network) DMZ computer Ping working between 195.34.45.194 and 195.34.45.193 Ping dont working between 195.34.45.194(Dmz computer) and ANY ANOTHER HOST ! (195.34.45.15 and others) PLZ SOMEBODY HELP!!! May be i must add entry in route ? ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')