Additional bit of information for the problem below... the proxy logs indicate the following: <CLIENT IP> anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 2003-06-13 01:48:33 <HOSTNAME> - webmail.<FQDN> INTERNAL ISA IP> 5108 1641 708 102608 http GET http://<INTERNAL MAIL SERVER IP>:5108/attachment/ROUTING.OLD?auth=YjM1NjQxNjQ6MTcyLjE2LjAuMTpqZWZmLmJ1dHRl&message=Id5a6ec.DAT&msgsection=2&dir= Inet 200 The last 200 being the status code would indicate to me it was a proper request answered with an "OK" status code. (ISA logs are in GMT) "ROUTING.OLD" was the attachment name for this test. 5108 is the internal mail server port (the vendor default). It can be set to anything. ********************************** Greetings, It usually takes me a while to encounter a good problem... but I found one. I have a product called VPOP3 (a nice little all-in-one mail server) installed on an internal server. I am using server publishing to host SMTP, POP3 and LDAP (mail server global address book) All works well. The problems occur with webmail publishing.> A destination set configured for webmail.<FQDN> A web publishing rule is setup to use the destination set to redirect the inbound request to the internal mail server (running its own HTTP services) It is set to use SSL (required) with SSL being terminated at the proxy. All of this works great. Webmail is over SSL.... everyone is happy... until they try to download an attachment via webmail. When connecting directly to the mail server via webmail on the internal network... all is fine with attachments. (ie: no magic between client and server) However clients utilizing webmail from the internet get the following error when trying to download attachments: "Internet Explorer cannot download ...<message id>.dat&msgsection=2&dir= from FQDN>. Internet Explorer was not able to open this Internet Site. The requested site is either unavailable or cannot be found. Please try again later." It appears that the process to download the attachment is broken mid-stream. Per the vendor, the all web traffic, including attachments are passed over the same port. Webmail server logging indicates the following 12/6/2003 20:48:34.337 - [MAILHTTP - 32] - Socket Error during Socket::GetByte - 10054 [An existing connection was forcibly closed by the remote host. ] (addr:<INTERNAL IP OF ISA SERVER>) It appears as if ISA is the cause of the winsock termination. The vendor's response to my questions was: "Hmm, the redirection may be killing the way VPOP3 handles attachments (it has to generate them on the fly and does some tricky things to the URLs to try to make the web browser download them with the right name)" Any ideas? I thought it might be some wild URL mojo but do not have URLScan installed. The server is a SNAT client so their shoudn't be any proxy client issues... :-) Jeff Butte Linked Solutions, Inc