Hi Mark, If you can publish the DMZ host via a Server Publishing Rule, then you have a problem, as you can only publish LAT hosts. Double check your LAT and make sure the DMZ addresses are not in there. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Mark Wrightson [mailto:mark.wrightson@xxxxxxxxxxxxxxxx] Sent: Monday, February 03, 2003 9:15 AM To: [ISAserver.org Discussion List] Subject: [isalist] Trihomed DMZ http://www.ISAserver.org Have setup a Trihomed DMZ as per Tom Shinders book (ISA Server and Beyond) Public addresses on DMZ interface (Have treble checked all the ip address / mask / gateway settings on all interfaces as per book) Am trying make a web sever available on the DMZ as per instructions. I.E. Am creating a filter to allow access both ways to port 80 on the server from and request. Have enabled IP routing within ISA. It doesn't work. Can publish the server via publishing rule but not via filter. Can setup filters which work to the ISA server itself but not to the DMZ. Nothing seems to be being routed to the DMZ. Can ping server on DMZ from the ISA Servers or clients on the private network. Do I need to do anthing in RRAS (NAT / Routes ?) Anybody have ant ideas ? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')