This is the point where we enable DNS logging and see what shakes out. Is the ISA still denying those requests? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Raji Arulambalam" <rajia@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, February 06, 2002 22:33 Subject: [isalist] Re: DNS Help http://www.ISAserver.org Hi Jim Many thanks for the tips etc. I have made the changes, but still not working. Remote systems are still unable to do Reverse lookups. They are unable to get the PTR records from our DNS server. The forward lookup zones gets transfered ok. Any help on where I can start to look.?? Thanks --------------------------------------------- Raji Arulambalam Systems Administrator Bay of Plenty REGIONAL Council P O Box 364 Whakatane. NEW ZEALAND Phone: 0800 ENV BOP (0800 368 267) +64 7 922 3390 Fax: 0800 ENV FAX (0800 368 329) +64 7 922 3393 http://envbop.govt.nz -------------------------------------------- [Unix] is not necessarily evil, like OS/2. - Peter Norton -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Thursday, 7 February 2002 3:25 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: DNS Help http://www.ISAserver.org PTR lookups are made using the same mechanism for forward lookups; UDP-53. NSLookup and some SMTP servers (IIS, Exchange, for instance) also use TCP-53. Packet Filter Name : DNS filter This one is ok (outbound packets) - in other words, no change here Packet Filter Name : DNS Query Old - Direction : Inbound and Outbound New - Direction : Receive-Send Packet Filter Name : DNS TCP This one is ok (inbound packets) - this on also needs no change Packet Filter Name : DNS Zone Transfer Old - Direction : Inbound and Outbound New - Direction : Inbound Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ****************************************************** This e-mail has been checked for viruses and no viruses were detected. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')