I have a ftp server running w2k server with sp2 running behind isa as stand-a-lone and everything seems fine (followed instructions from ISAserver.org) - external clients can connect and also LAN clients, the problem is when LAN clients going out through ISA then coming back in cannot reach the ftp server. Can anyone help? Thanks, Rats