Server publishing rules are only to allow connection to a service from external hosts. Since you're trying to use nslookup from the ISA itself, you need two packet filters; 1. DNS Query - installed and enabled by default; allows UDP-53 from the ISA default IP to any. 2. DNS Zone Transfer - (you create) allows TCP-53 from the ISA default IP to any Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Admin" <administrator@xxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, July 13, 2003 07:14 Subject: [isalist] Re: NSlookup and DNS http://www.ISAserver.org top disc Hi I search ISAserver.org for DNS and I followed the first article Http://www.isaserver.org/articles/Running_a_DNS_Server_on_the_ISA_Server .html and created the 2 Server publishing rules This is what happens when I do NSLOOKUP Microsoft Windows 2000 [Version 5.00.2195] (C) Copyright 1985-2000 Microsoft Corp. H:\>c: C:\>nslookup Default Server: viper.wjengland.com Address: 192.168.1.1 > set q=all > server ns1.keyworld.net *** Can't find address for server ns1.keyworld.net: Server failed > -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 13 July 2003 16:09 To: [ISAserver.org Discussion List] Subject: [isalist] Re: NSlookup and DNS http://www.ISAserver.org "the article"? There are several at various places that deal with ISA and DNS... What rules / filters have you created? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Admin" <administrator@xxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, July 13, 2003 00:10 Subject: [isalist] NSlookup and DNS http://www.ISAserver.org top disc Hi I am doing some experimenting and need some help 1. I want to use nslookup from my ISA machine...no lookups seems to work and I cannot set server=xxxxx 2. I registered a testing domain at internic theoneinfront.com and published my dns but it cant seem resolved from any where. I followed the instructions as per the article. Any ideas appreciated. William ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: administrator@xxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')