All, Thanks for your help in advance. I've finally got my T1 and a test ISA box. Here's the way I have it set up currently: (Not actual IP's) Router Eth0: 209.159.102.1/27 Public ISA NIC: 209.159.102.2/27 DG: 209.159.102.1 DNS: Public DNS Server DMZ ISA NIC: 209.159.102.3/27 DG: None DNS: ? Private ISA NIC: 10.1.1.2 DG: None DNS: 10.1.1.1 Does this look right? What about DNS for the DMZ? I'm assuming I'm close here so I'll go on to the next question. Where can I find some standard rules to guide me while setting my rule base? (I might have overlooked them on isaserver.org)