>Shouldn't I be able to have both DNS servers protected? Absolutely! More information needed: Are the DNS servers in a DMZ or LAN? How are they set up on ISA to allow traffic to/from them? Do you have forwarders setup on them? Are they part of your internal Domain? What DNS servers are listed in the TCP/IP Properties pages of the DNS servers? Are they running MS-DNS? NT 4.0 or Windows 2000? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Peter Vogel [mailto:peterv@xxxxxxxxx] Sent: Saturday, October 05, 2002 11:32 AM To: [ISAserver.org Discussion List] Subject: [isalist] DNS problems, DNS servers behind firewall http://www.ISAserver.org Since implementing an ISA solution a few months back I have been plagued with transient timeout problems for external users accessing our sites. Both DNS servers are behind the firewall. Sometimes, restarting ISA services would alleviate the problem, but only on a temporary basis. I have now removed one of the DNS servers from behind the firewall and put it directly on the ADSL feed. Presto, timeout problems have disappeared. Does anyone have some insight into this? Shouldn't I be able to have both DNS servers protected? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')