Is the server at 192.168.1.205 using ISA as the default gateway? ..or Is the rule configured as "Requests appear to come from the ISA computer"? ..must satisfy one or the other... What does the FTP server log show? -------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! -------------------------------------------- -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Sunday, February 05, 2006 10:28 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FTP Server access broken since ISA SP2 Install http://www.ISAserver.org OK...here ya go Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL 206.53.184.113 INCHINDAR - TCP - - 3928 0 0 0 0x0 0x0 0x0 Firewall 2/5/2006 2:24:55 PM 192.168.1.205 21 FTP Server Initiated Connection MilsoftBDA FTP Server 206.53.184.113 External Internal - - ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.