Hi John, That's right. That's the only way to create the traditional trihomed DMZ with ISA Server -- you have to use public addresses. But as you'll see in the ISA Server and Beyond book, there are some creative techniques you can create to create a LAT-based "pseudo" DMZ segment. Thanks! Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1> http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] Sent: Wednesday, December 04, 2002 10:52 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA Server and Beyond now available from amamzon and barnes and noble http://www.ISAserver.org The only time ISA Server doesn't not keep track of connection and application layer state information is when you create a trihomed DMZ; in that case you have to create explict packet filter entries for inbound and outbound connections. Clarification please: ...you create a trihomed DMZ with public addresses... John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Wednesday, December 04, 2002 8:31 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA Server and Beyond now available from amamzon and barnes and noble http://www.ISAserver.org Hi Gregor, We can have some fun on this list sometimes :-) make sure to forward this to your relatives! But to keep things on topic, here's an ISA Server tip: ISA Server is a stateful firewall. Don't let help desk morons tell you that their application won't work with ISA Server because "ISA Server is not a stateful firewall" because that's just bunk. Thanks! Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1> http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Gregor Streng [mailto:gregorstreng@xxxxxxxxxxxx] Sent: Wednesday, December 04, 2002 9:40 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA Server and Beyond now available from amamzon and barnes and noble http://www.ISAserver.org > Order now and you'll get it by Christmas :-) Well, I suppose this a perfect X-Mas present for all ISA administrators. I just hope non of my relatives is reading that <bg> I know such mails don't belong to this list but I couldn't resist. I'm sorry. Gregor -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: 04 December 2002 15:19 To: [ISAserver.org Discussion List] Subject: [isalist] ISA Server and Beyond now available from amamzon and barnes and noble http://www.ISAserver.org For all of you who have been waiting for "ISA Server and Beyond" to be available via Amazon and Barnes & Noble, I've good news. They have the books in!!!! Order now and you'll get it by Christmas :-) You can click the first "tinyurl" link to get there. Thanks! Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1> http://tinyurl.com/1llp <http://tinyurl.com/1llp> ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregorstreng@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')