Hi, If you use snat but only allow certain protocols, tftp not being one of them, you're save too aren't you? Best regards, Han Valk. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, August 12, 2003 20:29 To: [ISAserver.org Discussion List] Subject: [isalist] MSBLAST worm and the firewall client http://www.ISAserver.org Hey folks, Remember to whack the msblast.exe by including it in your mspclnt.ini files. Another reason to install the firewall client! :-)