Hiya Joseph, Watch your logs while you test; one of the best things added to ISA 2004 was the ability to "watch the traffic" without having to fire up your fav packet grabber. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: josephk [mailto:josephk@xxxxxxxxxxxxxxxxx] Sent: Friday, November 12, 2004 22:35 To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA Publish Scenario http://www.ISAserver.org Hi Thomas, My sites are still off line. :( I decided to move right into ISA 2004 ith the good, bad and the ugly. As you know I'm running a back to back setup. EXTERNAL ISA ..HONEY POT DMZ ....SNORT INTERNAL ISA ..DMZ (PUBLIC DNS, PUBLIC WEB, SMTP FORWARDER) ip 172 type ..PERIMETER (NOTHING YET) ip 198 type ..INTERNAL(AD, EXCHANGE, SQL) ip 10 type My Internal DNS forwards out to the 172 type zone in the DMZ for what ever reason. It seems that my DNS server on the 172 segment isn't resolving correctly any tips on getting this to publish? (I think that I have all rules and server publishing correct. Maybe I'm missing something by passing threw to the back end ISA box. The front end dosen't seem to know that the DNS server exists on the 172 segment. I thought I read something about turning off name resolution on rules out on MS sites if this is an issue. Using the weblist web posting is the pits. Thank you, Joseph cismic@xxxxxxx until I get my servers back online ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.