Hi Osman, Is your internal DNS not capable of external resolution? If not, then 1. Open the ISA MMC and drill down to "Client Configuration" 2. Open "Firewall Client" and select the "Application Settings" tab. 3. Click "New" and 1. enter "Common Configuration" in the "Application" field (no quotes) 2. select "Name Resolution" in the "Key" dropdown list 3. select "L" in the "Value" dropdown list 4. click "Apply" and "OK" You'll have to "refresh" each FW client to see the changes take effect. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "osman filiz" <osmanfiliz@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, May 13, 2002 2:22 AM Subject: [isalist] Firewall client problem http://www.ISAserver.org We have clients behind isa server,this clients points our internal DNS Server(this server also behind isa)to resolve names for internal servers.The problem is that clients on which firewall client is installed don't query our dns server they send all packets to isa.How can i prevent this? _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')