Dear exchlist; Herewith i capture log from W3SVC1: I just wonder because =============================================================================================== 2002-03-21 01:23:00 100.102.100.10 - 100.100.100.217 80 PROPFIND /instmsg/aliases/candra - 207 - 2002-03-21 01:23:01 100.102.100.10 ARTACRS\candra 100.100.100.217 80 SUBSCRIPTIONS /instmsg/aliases/candra - 200 - 2002-03-21 01:23:03 100.102.100.10 ARTACRS\candra 100.100.100.217 80 PROPPATCH /instmsg/aliases/candra - 207 - 2002-03-21 01:23:03 100.102.100.10 () 100.100.100.217 80 ACL /instmsg/aliases/candra - 401 - 2002-03-21 01:23:04 100.102.100.10 ARTACRS\candra 100.100.100.217 80 ACL /instmsg/aliases/candra - 200 - 2002-03-21 01:24:37 100.100.100.17 - 100.100.100.217 80 NOTIFY /instmsg/aliases/candra - 500 - 2002-03-21 01:24:39 100.100.100.17 () 100.100.100.217 80 PROPPATCH /instmsg/aliases/amos - 401 - ================================================================================================ * 100.100.100.217 is IP instant messaging server (A CLASS) * 100.100.100.17 is my IP Client (A CLASS) * 100.102.100.10 is IP Server with other network (B CLASS) it should be 100.102.100.32 (ip client with B CLASS) not 100.102.100.10, why is the log not detect ip client (100.102.100.32)? please anyone can help me to fix it up? Regards; Amos