Hey Jim, Some one on the Web boards found that this bypassed the configuration in the script. Any ideas? --Tom. The content that slips through looks like this HTTP/1.1 200 OK Proxy-Connection: Keep-Alive Connection: Keep-Alive Content-Length: 15734 Via: 1.1 DMZ-ISA, 1.1 LNK-ISA Date: Thu, 05 Jan 2006 23:45:14 GMT Content-Type: binary/octet-stream Server: Apache/1.3.34 Vary: User-Agent Content-Disposition: inline; filename="browsercheck.wmf" Binary Data: 1162 Bytes [352/1162] 05 C6 19 03 99 E4 E1 7B 07 00 00 00 FC 02 D0 13 5E 08 80 BA CD 0F 08 00 00 00 FA 02 73 EA 29 32 01 13 58 12 87 8E 07 00 00 00 FC 02 4C A4 C4 50 AE 43 76 B6 07 00 00 00 FC 02 EF D8 A3 65 4A 14 E6 5C 07 00 00 00 FC 02 96 EF 20 AB AD 5F 19 1E 07 00 00 00 FC 02 2D C1 28 69 73 A5 65 91 07 00 00 00 FC 02 3E F6 83 A8 26 80 7B BC 08 00 00 00 FA 02 45 52 F9 89 E2 FB 3B 6A 95 B6 07 00 00 00 1B 04 4F F4 BE B3 7F CA 0A 78 08 00 00 00 FA 02 AC 12 60 47 28 C9 31 A2 5E A3 07 00 00 00 1B 04 47 F3 00 6F A3 87 C8 EC 07 00 00 00 1B 04 35 FA 89 F0 A3 5E 50 97 08 00 00 00 FA 02 DA 7C A2 35 1E 3D D9 86 7E 17 07 00 00 00 1B 04 0F 39 D0 D2 82 85 EF D3 07 00 00 00 FC 02 49 5E 1E 41 6B 0E 66 CD 07 00 00 00 1B 04 86 25 2F 63 54 A9 88 FF 07 00 _____________________________ /Dennis Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls **Who is John Galt?**