Hi William, The way is supposed to work is the VPN server assigns the VPN clients a DNS server address, and that DNS server is on your internal network. In that case, the DNS server is able to resolve both internal and external names. HTH< Tom -----Original Message----- From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] Sent: Monday, September 20, 2004 3:13 PM To: [ISAserver.org Discussion List] Subject: [isalist] VPN Clients and DNS http://www.ISAserver.org Hello, I have a problem with DNS and VPN connections. When a computer connected to an ISP makes a VPN connection in which it is specified to use the default gateway on the VPN server DNS queries fail. This is happening because the ISP is blocking DNS requests from hosts outside its network. The question is how can one have the DNS configuration change during the period of time while the VPN is up. I obviously have DNS servers on my protected net that I want a VPN client to use. I know this can be scripted but the question is why is that necessary. I would think the default behavior would be to use the DNS server on the remote network. Is there something that I have misconfigured? Thanks Bill William Holmes (MCP) Department of Computer Science 310 Upson Hall Cornell University Ithaca, NY 14853 wtholmes@xxxxxxxxxxxxxx 607 255-1757 (o) 607 227-6049 (c) ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx