Hi Soltan This is what I have done and it works fine. Instead of the names I have used the IP addresses of the servers. On the ISA under protocol rules there is a protocol rule called <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /> âServer name Time accessâ This allows access outside for the NTP protocol for Server name to request time synchronisation from an NTP server. In this case we are using CSIRO NTP server here in Sydney Then under packet filters there is a custom filter, âDomain time allowâ allows NTP send receive to CSIRO NTP on port 123 UDP NOTE the local Host is the outside interface of the ISA server -----Original Message----- From: Zoltan Szaraz [mailto:szaraz@xxxxxxxxxxx] Sent: Wednesday, 22 May 2002 7:37 AM To: [ISAserver.org Discussion List] Subject: time update throught UDP port 123 Hi, Where can I define to allow to use port NTP (123 UDP) only one computer from LAN to only one computer (server) in Internet? I find only in Protocol rules, where I can modify only IP from LAN and for every destination. I need to define only one IP for destination. zoltan szaraz This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. Views expressed in this message are those of the individual sender, and are not necessarily the views of Baptist Community Services. 1