By host, do you mean a internal client computer ? What was the exact protocol rule, with port numbers ? Was the allow all protocol rule on by mistake ? regards ----- Original Message ----- From: Dan Gabbard To: [ISAserver.org Discussion List] Sent: Monday, January 13, 2003 3:00 PM Subject: [isalist] Protocol Rules and Definitions - Kazaa http://www.ISAserver.org I'm running ISA in Integrated mode with SP1 installed. All hosts run the Firewall client. The other day I loaded Kazaa Lite on one of the internal hosts and then created protocol definitions for it along with a protocol rule for just Kazaa. Everything worked fine.until I later decided that I only wanted that host to be able to use that rule. I disabled the rule and then created another client set that included a small range that only that host belonged to (changed host from DHCP to static address). I then edited the Kazaa protocol rule to use only the newly created client set. Now it doesn't work. I then changed the host back to DHCP, which it then lands in the range of my original "local" client set. I changed the Kazaa protocol rule to allow the "local" client set but it still doesn't work. I deleted the rule and added the two protocol definitions that I created originally for Kazaa to my "local" rule that I use for HTTP.etc. Still doesn't work. The host with Kazaa still has access to all the other protocols in the original "local" rule. I have rebooted and stopped and started the Web/Firewall services during these changes. If I enable the "allow all" rule it works but that's certainly not what I want. What the heck is going on here? Dan ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: strangconst@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')