Hey Joe We have the same service with Microsoft (good luck with it ;-) ). Anyway, the only thing you need is a server publishing rule allowing SMTP server traffic just from the list of IPs Microsoft have on the main page of frontbridge (I guess is on the main page) and publishing your exchange or Lotus notes or Postpath or the server you use for emails. Diego ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Joe Pochedley [joepochedley@xxxxxxxxx] Sent: Thursday, June 05, 2008 11:06 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Possible to Filter inbound publishing rules by source (remote) IP? Hopefully an easy one for the ISA gurus… Recently we signed up for Microsoft’s Frontbridge spam filtering service. As part of the setup, the MX record of our company has been changed to Microsoft’s service… (Like PostINI and other hosted filtering services.) Microsoft recommends only allowing inbound SMTP connections from their list of servers. This seems like a good idea, as I still see spam coming direct into our IP (old MX record) and not being routed through the service even though it’s been more than a month since I changed the MX records… Unfortunately, I can’t find a way to make the publishing rule bend to my will and only accept incoming SMTP connections only from the authorized IP addresses. Can it be done? If so would someone be kind enough to point me in the right direction? Running ISA 2006 here. Joe Pochedley Network & Telecommunications Manager The North American Mfg. Co. email: JoePochedley@xxxxxxxxx<mailto:JoePochedley@xxxxxxxxx>