Hi Leo, Here's a portion of the logs snip you sent... 2002-01-06 00:00:15 192.168.255.1 255.255.255.255 Udp 68 67 BLOCKED 62.45.59.38 2002-01-06 00:00:15 192.168.255.1 255.255.255.255 Udp 67 68 BLOCKED 62.45.59.38 ..the first line is a client-to-server call (68 to 67) ..the second is server-to-client The first line is typical of W2K DHCP rogue detection; it will make client calls to see if another DHCP service is listening. If one responds, it will shut itself down. You're running DHCP server on the ISA, therefore, the registry setting is applicable (and works, BTW). Another time you'll see these entries is when RRAS clients ask for IPs. Also, make sure that DHCP is only bound to the internal IP. DHCP on ISA becomes a problem because it's almost totally broadcast-based. Any service that makes an "all nets" broadcast (255.255.255.255) will be seen at all interfaces. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Leo" <leo@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, January 07, 2002 05:56 Subject: [isalist] Re: How to get rif of DHCP broadcast logging? http://www.ISAserver.org There are a lot of protocols that broadcast. Neither of these protocols are visible in the ISA logs. It's only DHCP that's giving trouble. The LAT is also good configured...so it's even stranger because broadcast traffic is only mentioned for the local segment. The external adapter does not belong to that segment!! Changing the "DisableRogueDetection to 1" is not the solution because it's not a client orientated problem. The external adapter already has an address and the initial cause of the problem is a DHCP server problem or an ISA server problem. I'm wondering if there is anyone without this problem!? Greetings, Leo ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@j alojash.org To unsubscribe send a blank email to $subst('Email.Unsub')