There should only be a gateway assigned to the public NIC that is attached to the internet. The internal NIC and the DMZ NIC should have no gateway. You then should add static routes for your DMZ. -----Original Message----- From: W. Colter Bowman [mailto:colter@xxxxxxxxxxxx] Sent: Friday, April 19, 2002 9:15 AM To: [ISAserver.org Discussion List] Subject: [isalist] Repost: Putting Exchange 2000 on DMZ using ISA 2000 http://www.ISAserver.org I have a DMZ, and the NICs on the ISA firewall are, 192.168.1.1:255.255.255.0, (Internal), 63.71.109.4:255.255.255.248, (External-dirtynet), and 63.71.109.107:255.255.255.0(DMZ segment), for some reason the 107 works fine on .0, on an ip standpoint does that look right, what should my gateway be on my dmz computer NIC. Is this configuration even correct. I have looked at the learning zone but still this does not work. When I enable the dmz nic the internal network computers can not get to the internet. I have the External-dirtynet on a separate hub as well as the dmz network and internal. Do I need to put a specific route in a host file or in routing and remote access. If so what would be the correct route? Thanks in advance. Colter ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tim@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')