Tom, I forgot to say it works fine after I made the server also SecureNAT for this ISA -- it is now SecureNAT for two different ISA servers. The MSKB and your message below helped. Thanx again greg -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Friday, January 17, 2003 10:25 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: can not publish servers other than port 80 http://www.ISAserver.org Hi Gregory - You need to make the server a SecureNAT client. The source address is preserved when the packet is passed, so it needs the SecureNAT client config to route the packet back to the Internet host that made the request. You can check out MSKB 311777 if you can't change the gateway config on the published server. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Gregory Crockett [mailto:Gregory.Crockett@xxxxxxxxx] Sent: Thursday, January 16, 2003 4:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] can not publish servers other than port 80 http://www.ISAserver.org Hello all: I can only pub port 80 using web pub rules. I can not pub anything using server pub rules. I can pub ftp with a bridging redirect using web pub rules. Netstat -na on internal machine show syn_ sent ; time_wait ; fin_wait_2 from the Internet system requesting access. If I telnet to port 25 using cmd telent, it just sits. Looks like ISA is passing the request to the internal machine, but the internal machine does not know how to return. Both machines are mulihomed (multiple ip addresses/networks on a single nic). The isa is 192.168.113.249 / 110.249 / 112.249 the smtp/ftp server is 192.168.113.244 / 110.244 / 112.244 -- smtp and ftp use only 113.244. The pub rules point to 113.244. However, netstat -na shows isa using 110.249 to send to 113.244. TIA have fun! greg ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isaserver@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')