Jim, In the back to back design, with a private IP addressing scheme, could you use this 'trick' to get the internal ISA to not treat requests made to dmz machines from the internal network as external requests? I can setup a routing rule which fowards all requests to a certain (made up) url to the dmz hosts, but would adding DNS entries on the internal network (NT 4.0 <-- not really DNS dependant) pointing to some made up request to the hosts on the DMZ, and since the internal network card on ISA uses this internal server as it's dns resolutor, ...would that cause ISA to treat those requests as pseudo-internal requests? Logan -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Wednesday, February 06, 2002 9:54 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Accessing published servers http://www.ISAserver.org It makes no sense to use an external IP to reach an internal resource and ISA understands this. You can't change ISA behavior, but you can change the way your requests are made: Create an internal version of your external DNS zone, use the same names and assign internal IP addresses. Add your external domain to the LDT and you'll be off and running. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ <http://isaserver.org/authors/harrison/> Read the books! ----- Original Message ----- From: Anthony Roberts <mailto:Anthony@xxxxxxxxxxxxxxx> To: [ISAserver.org Discussion List] <mailto:isalist@xxxxxxxxxxxxx> Sent: Wednesday, February 06, 2002 02:12 Subject: [isalist] Accessing published servers http://www.ISAserver.org <http://www.ISAserver.org> Morning all, Can anyone help me with this problem well two, I have built a DMZ, Back to Back and in it is a FTP server and Web Server both published be Server publishing. The external isa is in Fire wall mode the internal is in intergrated mode, my problem is I cannot access the sites from internal unless I use there private ip's how can I get it so that there public ip work from local as well, we are proxy and fire wall chaining to the external isa server. Thanks guys Robbie ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: loganramirez@xxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')