The packet filter only applies to w32time or w32tm running ON the ISA. That was strictly for testing to see if you might have router / ISP issues. The DC needs a protocol rule in ISA that allows NTP (UDP). Also, verify that the DC has a default IP path (default gateway or default route in routers) to the ISA. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Greg Foulks" <greg.foulks@xxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, August 15, 2001 10:27 AM Subject: [isalist] FW: Re: w32tm http://www.ISAserver.org Jim, I was trying to send you a screen shot of my setup. I guess it's too big? Anyhow. I've got a packet filter setup just as you described and still none of my internal machines can query an external time server. Do you have any other ideas? Thanks, Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: greg.foulks@xxxxxxxx Voice: 614.318.5036 Fax: 614.318.5005 -----Original Message----- From: Lyris ListManager [mailto:lyris@xxxxxxxxxxxxx] Sent: Wednesday, August 15, 2001 1:02 PM To: greg.foulks@xxxxxxxx Subject: Re: RE: [isalist] Re: w32tm Sorry, your message was not sent out to 'isalist' because it is too large. The maximum message size is 30k, and your message was 89k long. --- R------=_NextPart_000_0022_01C1258D.09237660 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Jim, Attached is what my ISA server settings are for the UDP connection to a external time server. They seem to be set to what you have specified however none of my internal machines can query an external time server. any other ideas? Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: greg.foulks@xxxxxxxx Voice: 614.318.5036 Fax: 614.318.5005 ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')