No. That's why packet filters and trihomed DMZ (including public address DMZs), suck. :-) Tom, are you serious? ISA does not do stateful packet in the DMZ? :-( Do the other vendors? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer 701 S. Euclid La Habra, CA 91631 562-694-4800, ext. 104 jtolmachoff@xxxxxxxxxxxxxxxx www.reliancesoft.com <http://www.reliancesoft.com/>