Hi Tom Indeed that's exactly what I'm doing, using packet filters. (ie)67.116.xxx.xxx external nic on isa secondary dns=168.103.xxx.xxx all primary zones on 67.116.xxx.xxx transfer fine to 168.103.xxx.xxx its the primary zone on 168.103.xxx.xxx transferring to 67.116.xxx.xxx where all the trouble comes into play. Error message indicates some sort of network problem. Thanks Jim -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Thursday, February 06, 2003 4:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: dns http://www.ISAserver.org Hi Jim, Use packet filters to support zone transfers to and from the DNS Server on the ISA Server. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Jim [mailto:jmay@xxxxxxxxxxxxx] Sent: Thursday, February 06, 2003 2:42 PM To: [ISAserver.org Discussion List] Subject: [isalist] dns http://www.ISAserver.org Hi I have a primary dns server running on the external interface for public name server. I have about 5 zones. All primary zone transfers to the secondary server work fine, however I have one secondary zone on the isa server that will not communicate with its primary master which is the secondary server for all the zones on the isa server. Note the name server is not configured to listen on the default address of the external nic, I multiple addresses configured on the external side of the server. Anybody have any suggestions? Jim ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jmay@xxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')