Hi Steve, How did you add an address range to an interface? And why? Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls **Who is John Galt?** ________________________________ From: Steve Lunn [mailto:Steve.Lunn@xxxxxxxxxxxxxxxx] Sent: Monday, January 23, 2006 8:35 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA2004 - Routing Question http://www.ISAserver.org I finally got around to installing ISA Server 2004 over the weekend, and everything seems to be running okay but with one exception. Out ISA server also acts as our default gateway, and it has two persistent routes in it that point to two routers that connect to a pair of point to point leased lines to two remote sites. I've added the IP address ranges of the two remote sites to the Internal interface of the ISA server In order for the routing to work I've had to create a rule that allows all traffic between the internal interface and the internal interface, which works up to a point, but some connections are failing. I've run the monitor and the traffic to the remote sites shows up as a Denied Connection if I try and FTP, but ping gets through. I've tried installing the firewall client, but the ftp connection fails, but then works if I ping the destination first. The denial doesn't have any rules associated with it, and the interfaces both show up as internal, so where am I going wrong? Please Help? Regards, Steve Steve Lunn Technical Support Technician - Microsoft MCP engage Mutual Assurance DDI: 01423 855101 Fax: 01423 855181