The internal DNS should have the IP of itself, not 127.0.0.1 or the ISP DNS. Have you run the tests against the internal DNS server to see if it is working properly? (Under DNS Properties) Remove all reference to ISP DNS EXCEPT in your DNS Forwards configuration. Recap, all domain computers should ONLY point to Internal DNS server, and that should have forwards setup to ISP DNS servers, at least 3 of them. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Lian Wee LOO [mailto:lwloo@xxxxxxx] Sent: Saturday, September 13, 2003 11:31 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA Setup http://www.ISAserver.org Hi ISA Gurus, I am puzzled whether my ISA setting is optimized, W2K AD Environment ISA as intergrated mode and internal NIC pointing to Internal DNS which have forwarder enabled. I always encoutered error like unable to resolved and while do a DNS recursive test it always failed(timeout is 90). ISA Internal NIC setting IP: 192.168.0.1 SBM: 255.255.255.0 GW: NONE DNS: 192.168.0.5 Internal DNS Server(AD n DC) IP: 192.168.0.5 SBM: 255.255.255.0 GW: 192.168.0.1 DNS: 127.0.0.1, X.X.X.X (ISP DNS) (Forwarder enabled pointing to ISP DNS) Is the above mentioned settings optimized? Or it is better to turn off forwarder? Note that client DNS is point to internal DNS and secondary pointing to ISP DNS. Please advice. Thank you so much. best regards, lwloo 2k'3 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')