I agree with you John but ISA should have at least contacted the router asking it if it knows about that route. Obviously, depend on the router technology, ISA might have known about it when I just plugged it in. After explaining Microsoft what happened, they admitted that using network monitor that comes with Windows 2000 does not show these packets because of a "featured bug". When using other sniffers they could see these packets being refused by the router. I won't use network monitor again... Thanks again, Tom -----Original Message----- From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] Sent: Saturday, February 15, 2003 8:11 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: DNS Issue http://www.ISAserver.org > The problem was my router. I did not have it configured to route packets > to the correct subnet! The bizarre part of it is that the external > interface of the ISA did not show any packets trying to go out. Once I > made the router change, I could see the packets going. Does ISA supposed > to do that??? ISA in its more elementry form is a router; there it needs to know what to do with packets it receives. Since the next hop, the edge router did not know about the segments, ISA kept it from going anywhere. Glad it is working now. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tomerm1@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')