1) The problem is that i always have to dialout manualy after a reboot otherwise the external ip is not there when isa starts. I dialout manualy and restart the services. Then the external ip is known to isa and publishing works fine. When i disconnect the line manualy, and go on browsing for example isa dialouts for me that part works fine. 2) This one is the biggest problem. I published rdp (internal Terminal server) works fine, only the client address sets doesnt work i can connect from every ip. Not only from the client address sets i defined. Tested this situation when i have a cable connection the client address set works fine. but when i have the vpn connection for adsl the client address set don't work. Below an ipconfig /all of the isa machine. Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : s02-xxx Primary DNS Suffix . . . . . . . : xxx Node Type . . . . . . . . . . . . : Broadcast IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : xxx Ethernet adapter Extern: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI For Complete PC Management NIC (3C905C-TX) Physical Address. . . . . . . . . : 00-04-76-0E-6D-27 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.0.0.139 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : NetBIOS over Tcpip. . . . . . . . : Disabled Ethernet adapter Intern: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Compaq NC3161 Fast Ethernet NIC Physical Address. . . . . . . . . : 00-50-8B-33-A7-12 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.15.26 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 192.168.15.25 PPP adapter Mxstream: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface Physical Address. . . . . . . . . : 00-53-45-00-00-00 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 213.84.xxx.xxx Subnet Mask . . . . . . . . . . . : 255.255.255.255 Default Gateway . . . . . . . . . : 213.84.xxx.xxx DNS Servers . . . . . . . . . . . : 194.109.104.104 194.109.6.66 NetBIOS over Tcpip. . . . . . . . : Disabled ----- Original Message ----- From: Henri Vissers To: [ISAserver.org Discussion List] Sent: Monday, September 03, 2001 5:48 PM Subject: Re: [isalist] Re: TS RDP Session With client address set enabled. Yes, i restarted the services. DSL here works as follows. It setups a kind of vpn connection. When i reboot the server i have to manualy dialout the vpn connection before starting isa server otherwise the smtp service doesnt publish ok. Cause is that the external ip isnt known to the isa server if it isnt dialout already before starting the services. Any ideas? now i can connect from any ip. that;s now what is want? ----- Original Message ----- From: Jim Harrison To: [ISAserver.org Discussion List] Sent: Monday, September 03, 2001 5:15 PM Subject: [isalist] Re: TS RDP Session With client address set enabled. http://www.ISAserver.org This should be working for you. How long after you made the settings did you wait? Did you restart the firewall service after making changes? Are the IPs internal or external? Is NAT involved in your DSL setup? Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: Henri Vissers To: [ISAserver.org Discussion List] Sent: Monday, September 03, 2001 7:51 AM Subject: [isalist] TS RDP Session With client address set enabled. http://www.ISAserver.org Situation: No terminal services installed on isa server, internal server with terminal services installed is published, Only login is allowed for certain fixed ip. Created client address set with the secure ips. And bound the client address set to the published rule for RDP. But login is possible from still every IP? What is going wrong? Did this before for ica and that worked fine?? Different from previously install is that i'm using adsl now. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: henri@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')