ICMP doesn't have a "port"; it's a whole different layer in the TCP/IP stack. You may be referring to a "keepalive ping", where a switch / router will occasionally make a TCP connection on a given port to verify application state. This is fairly common in load-balancing hardware.. Is your SMTP server a secureNAT client? Do you have the correct protocol rules in place? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: Greg Mulholland To: [ISAserver.org Discussion List] Sent: Thursday, January 10, 2002 16:44 Subject: [isalist] allowing incoming icmp http://www.ISAserver.org Im new to isa How do I make a rule that lets my firewall accept icmp packets from an address on port 25 (just one address). I am doing this because my mail will not send and I have had experience with it before with an old firewall and it fixed the problem. However I am not sure how or where to do this in isa. Help would be appreciated Duke ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')