Add RRAS LAN routing and use RRAS packet filtering to limit the traffic between subnets. Just don't try to use RRAS NAT alongside ISA NAT unless you like going bald. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help / books / articles! ----- Original Message ----- From: "osman filiz" <osmanfiliz@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, November 08, 2002 1:10 AM Subject: [isalist] ISA acts as a router in the LAT http://www.ISAserver.org I have ISA server on W2K server with sp2.We use isa as firewall and cache mode,paket filtering also enabled. Our server is multihomed server,4 network interfaces are used for internal clients and included in LAT.ISA acts as a router for internal clients that use isa server as default gateway.In our company it is forbidden that clients reach other subnets.How can i prevent user access to other interface using isa? _________________________________________________________________ Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')