So to test your configuration, You should be able to perform a nslookup of your support.nfti.com and your results should be resolved by your internal DNS servers that points to the internal IP address If you ping your new FQDN does it respond the internal IP address, if not and you still recieve the external IP address, then do the following: Local Domain Table 1. From the Desktop view, click Start, select Program Files, select Microsoft ISA Server, then click ISA Management 2. In the console tree of ISA Management, Expand Network Configuration, right-mouse click Local Domain Table (LDT), select New, then click LDT Entry... Where o Internet Security and Acceleration Server o Servers and Arrays o ATL-NA-ISA-00 o Network Configuration o Local Domain Table (LDT) 3. New LDT Entry window appears, under Name dialog box, type *.nfti.com, then click OK On your workstation, update your firewall client. Now verify your ping test to support.nfti.com, you should now have it pointing to your internal ip address -----Original Message----- From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] Sent: Wednesday, August 15, 2001 10:34 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to fix the 14120 Event http://www.ISAserver.org David, I'm running AD/DDNS The problem site for example is support.nfti.com (you browse this site from behind the ISA server and you get the packet filter error. Do it from outside the ISA server and it doesn't create the packet filter error) I have a zone setup (obviously) for nfti.com I have a host record for the host support pointing to the internal IP address. ALL of my internal workstations are set to use only the internal DNS server (which has forwarding enabled to resolve external names) So I don't understand how a request from a internal workstation to support.nfti.com even makes it to the ISA server? Further I don't understand how one can create a FQDN that is mentioned in this list topic and in the Q article and what is different with my current setup. Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: greg.foulks@xxxxxxxx Voice: 614.318.5036 Fax: 614.318.5005 -----Original Message----- From: David Dellanno [mailto:david@xxxxxxxxxx] Sent: Wednesday, August 15, 2001 9:55 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to fix the 14120 Event http://www.ISAserver.org Hi Greg, Are you running AD/DDNS or NT4/DNS? You need to create a New Zone on your internal DNS servers to lookup your new host name. So when you create your new zone (newdomain.com) you only need to enter the host name (hostname.newdomain.com) -----Original Message----- From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] Sent: Wednesday, August 15, 2001 9:22 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to fix the 14120 Event http://www.ISAserver.org But, Microsoft DNS does not allow you to create a host record with the FQDN. You get to only enter the host name. Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: greg.foulks@xxxxxxxx Voice: 614.318.5036 Fax: 614.318.5005 -----Original Message----- From: Denis Alex Gathas [mailto:denis@xxxxxxxxxxxxxx] Sent: Wednesday, August 15, 2001 8:17 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to fix the 14120 Event http://www.ISAserver.org Greg, Search for Q288396 at Microsoft/technet. The answer for your question is there. Denis Alex FFHC - MSS(C) HBS - HPP - Eletronic Eng. Sao Paulo - Brasil ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: greg.foulks@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: greg.foulks@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')