Hi Philippe, Packet filters only deal with individual ports and protocols, no secondary connections. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Philippe" <pmathon@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, February 22, 2002 00:37 Subject: [isalist] FTP and tri homed server http://www.ISAserver.org Hi, I red an article from Tom about FTP and a tri homed ISA Server. Tom said that whan you want to have a FTP Server on a public DMZ, you have to create two paquet IP filtering: one for the port 21 for the DMZ, and another one from the port 20 of the FTP Server (if we use a FTP actif client). But, why create 2 filters, and not only one filter with a protocol definition with secondary connection ? thanks. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')