While I can explain what you need to do, you really need to understand it, and how the ISA DMZ works. You need to get the book ISA Server & Beyond, or at least go to the message forums on isaserver.org and search here http://forums.isaserver.org/ultimatebb.cgi?ubb=forum;f=9 as there is a lot of information that you need to go over. Basically, the DMZ is considered a separate subnet, and must be configured to be routed starting at the inbound router, generally the ISP router. You have been assigned a subnet of 16, with 14 useable. You will have to further subnet that, ending up with /29 which will give you 5 addresses available for the DMZ, minus one for the ISA NIC in the DMZ, giving you 4 useable addresses in the DMZ. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Andrey Silkin [mailto:silkin@xxxxxx] Sent: Friday, August 22, 2003 4:56 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Three homed DMZ http://www.ISAserver.org Please explain me the procedure of subneting .I didn't understand Why do I must to subnet my public ip-addresses's subnet. For example I have a subnet of public ip-addresses 195.42.182.145/28 . So can you describe what ip-address of my DMZ-segment's do i can use for it ? Best Regards Andrey Silkin -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, August 21, 2003 6:39 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Three homed DMZ http://www.ISAserver.org Your DMZ subnet needs to be a subnet derived from your assigned public IP addresses. That is not possible with the address you have listed. What is your assigned public IP addresses? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: Pranesh.K [mailto:cmspanu@xxxxxxxxx] > Sent: Thursday, August 21, 2003 3:58 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Three homed DMZ > > http://www.ISAserver.org > > > Dear Sir, > I am aslo using the same thing as u mentioned like > Public ip address for DMZ setup i.e. 202.140.129.209/255.255.255.248 > Internet Ip Address : 202.140.129.49/255.255.255.248 > Internal LAN Ip Address : 192.168.1.0/255.255.255.0 > > But the Problem is I am not able to ping to outside-world from DMZ Server > > Even though we have Configured the protocol rule for ANY protocol & BOTH > direction and installation mode in Integrated Mode.Installed the latest > Service pack. > > regards > > Pranesh K > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > johnlist@xxxxxxxxxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: silkin@xxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')