Questions for you... Q1 - Have you also disabled IIS socket pooling (http://support.microsoft.com/default.aspx?scid=kb;en-us;Q238131)? Q2 - Exactly how is the website published; server or web publishing? A1 - Packet filtering should be left on; otherwise, all you have is a limited RRAS functionality for another $1500 (what a deal). A2 - You don't create wpad.dat; ISA handles that for you based on the settings you apply to it. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Donny Wiguna" <edpdgu@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, June 17, 2002 2:50 AM Subject: [isalist] How to put off that damn 403 forbidden error messages? http://www.ISAserver.org Hi all! As a small firm, we're using MS Small Business Server 2000, and until recently, we've finally decided to install ISA Standard Server, together with other services (IIS, SQL, Exchange) on one machine. We've followed many suggestions from help and FAQ from isaserver.org, and we configured it like this: - We set IIS on IP 127.0.0.1 port 80 - Then we publish the web server on 192.168.0.5:80 having it routed to loopback IP - using a dial-up, we deactivated IP Packet Filtering, however we use IP routing, though it's not advised for the lack of security. - we put wpad as an alias of the server's name on dns structure. however we cannot use DHCP option of WPAD. How do I create a WPAD.DAT, anyway? Then... all seems to work (finally), except that everytime we try to connect to http://192.168.0.5 - it always returns 403 error messages. We couldn't figure out why. If it disconnected from internet, it returns error message 502 ! Please, help! Thanks, Donny A. Wiguna ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')