Hi John, What I'm saying is that you need to create a Server Publishing Rule to make the DNS server available to external, non-LAT hosts. You can't make an "all open" Server Publishing Rule (if for no other reason that the secondary connections would create issues). Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: jlyon [mailto:jlyon@xxxxxxxxxxxxx] Sent: Tuesday, March 30, 2004 8:59 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: DNS issue http://www.ISAserver.org Well, I have my external DNS server sitting behind (LAT) ISA because it is used for other functions on the internal network. Not the smartest setup, I know, but am in hopes that if DNS query/lookup and restricted X-fer is all that is opne I'll be ok. I can create a allow all protocols to that internal server and it is available on the web. On the win2k the DNS protocol rules are enough. Tom, this works great and has for two years on a ISA2k / WIN2k, but trying to do same on WIN 2003 is not. Thanks -John ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')