Restarting ISA services may have helped. VPN to the 2nd IP now works by creating the appropriate PPTP filters but still no pinging. Ping only works on the 1st IP. No sweat! No need to ping anyway... Maybe for a packet filter to work on a secondary IP it has to be for a specific port??? John -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Wednesday, April 24, 2002 6:41 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Packet filter weirdness http://www.ISAserver.org Make sure you wait a few seconds (or restart the ISA services). Changes don't take effect immediately. Your settings look fine for IP2... Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: John C. Shepard <mailto:jshepard@xxxxxxxxxxx> To: [ISAserver.org <mailto:isalist@xxxxxxxxxxxxx> Discussion List] Sent: Tuesday, April 23, 2002 8:00 AM Subject: [isalist] Packet filter weirdness http://www.ISAserver.org Has anyone gotten Filters to work on a 2nd or 3rd IP address for the external NIC? They seem to work perfectly for the first IP address but not for any other IP: External NIC: IP 1: 123.123.123.1 IP 2: 123.123.123.2 Filters: #1: Allow, ICMP ping response, External IP 123.123.123.1, All remote computers #2: Allow, ICMP ping query, External IP 123.123.123.1, All remote computers #3: Allow, ICMP ping response, External IP 123.123.123.2, All remote computers #4: Allow, ICMP ping query, External IP 123.123.123.2, All remote computers Results: Can ping 123.123.123.1 fine, but canot ping 123.123.123.2. It's almost like packet filters bind on nothing but the first IP. That is not the case with Server Publishing Rules. They work fine on the second IP. What is the explanation? John ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jshepard@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')