Hi Rob, Awesome. I can't wait to check out TMG! I've had a need for this for years... I've seen quite a few people chatting about TMG for awhile now and I've been putting off upgrading the firewalls that I'm responsible for... However, now that I've got an excuse, I guess it's time... Thanks again to everyone on the ISA/TMG lists! Your friend, Paul From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore Sent: Tuesday, May 18, 2010 5:45 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Dedicated ip address for email server Also, the new version of ISA - TMG - can do exactly what you want. You can use different outbound IP addresses for different outbound rules. Rob From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of James May Sent: Tuesday, May 18, 2010 3:44 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Dedicated ip address for email server Yes, thank you this might work. Steve From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Comeau Sent: Tuesday, May 18, 2010 12:06 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Dedicated ip address for email server Is this what you're looking for?: http://www.collectivesoftware.com/Products/IPbinder It's not native to ISA2006 to change the outbound IP. I haven't used this, but I think Tom may have suggested this in the past. Steve Comeau Associate Director of IT Rutgers Athletics 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com<http://www.scarletknights.com> [cid:image001.png@01CAF6B2.A7527110] [cid:image002.jpg@01CAF6B2.A7527110] From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of James May Sent: Tuesday, May 18, 2010 2:50 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Dedicated ip address for email server Hello, I have a isa 2006 box relaying for exchange 2007 hub transport server on the internal network. The ISA box is running GFI mail essentials so I like to relay inbound and outbound emails through the ISA box. Recently one of the machine's on the internal network got infected with malware and send out a ton of emails which got me blacklisted. Most all internal clients are blocked from outbound TCP port 25 except managers. I have two ip's bound to the external nic is there a way to have the ISA box send email out using a secondary ip. It seems no matter what ip the smtp sever is assigned when traffic exits the ISA box it uses the default ip address on the external nic. It would be nice to have internal nat clients use the default and if exchange could use the secondary ip address for sending email. From what I have read in my isa 2004 book this setup is by default even if you create a DMZ subnet you need to define a static route on your pubic isp router pointing to the default ip on the external nic of the isa box if you want traffic from the internet to reach you dmz. Thanks, Jim *** This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Rutgers University - DIA 83 Rockafeller Road Piscataway, NJ 08854 www.scarletknights.com<http://www.scarletknights.com> *** ________________________________ This email is confidential and should only be read by the intended recipient.