I gave you two options; pick the one that suits you best. You can either use the internal router as the DG for all internal machines (except ISA, of course), or you can create manual routes in teh first-subnet hosts. Either way, stop trying to use ISA as your internal router unless you are willing to physically place it between the subnets. ________________________________ From: harald [mailto:harald.wolf@xxxxxx] Sent: Mon 11/8/2004 12:51 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: dropped undefined traffic via static route with ISA 2004 http://www.ISAserver.org Thanks for your answer but let me explain: My network looks like this: Internet | Linux-FW | | DMZ (10.0.0.x/24) | ISA-Server 2004 (Back-Firewall)= Router = standard gateway | | First Subnet (192.168.x.x/16) | Router | | Second Subnet (192.16.x.x/16) When I want to establish traffic from the first to the second subnet, I need a static route back to the router between first and second subnet at the ISA which is the standard gateway. Because of this fact ISA will be involved in this traffic ... What would you suggest? Thanks Harald ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.