Hi John, Just for fun, can you tell me how you created an "all open" protocol rule that allows non-LAT hosts access to a LAT host DNS server? Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: jlyon [mailto:jlyon@xxxxxxxxxxxxx] Sent: Tuesday, March 30, 2004 8:19 AM To: [ISAserver.org Discussion List] Subject: [isalist] DNS issue http://www.ISAserver.org Dns publishing of a public DNS server behind ISA. Moving to a 2003 server from 2000 server. All rules are exactly the same. I have reveiewed all isaserver.org lists for findings of DNS issues. I have NO deny protocol rules except for the SOBIG fix and I have an allow ALL site and content rule. I have went through all the post fp1 hotfixes and found nothing that points to the isse at hand. I have installed the FP1, SP1 and HF255 for ISA use on 2k3. Problem....can't publish DNS with the proper rules. Only way to reach the servers from the web is to create an allow all protocol rule to that DNS server on the internal network. Then, of course, it works great. Can't do that!!!!! PLEASE help! WHY? Thanks in advance....this is not my first stop guys, I have worked on this for 2 days and am exhausted. Help would be most appreciated. John ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')