ALL I have a checkpoint firewall sitting between ISA and internal web server. I am using server publishing to publish sites on the the internal web server. Now as server publishing uses the internet client ip address to connect to internal web server, I need to create a rule which allows any-> to internal web server. But that will open a whole to the internal network. Is there a way to address this issue. I can't use web publishing because of some other concerns. May be if there is no way I will make the web server the firewall client, but don't want to do that Pls let me know any suggestions you all have. Thanks Shobha Sharma Network Operating Systems OIS Bureau of Technology Department of Public Welfare 717 772 7204