LDAP from internal Network to ISA Server DC

Hi All,

I hope you can help me, I'm really in a pickle...

I have got an ISA 2004 installed on a 2003 Small Business Server. Then I have got Exchange on a seperate member server.

The SBS server is my dc and isa sits on this box too. Now, the exchange box sends traffic on port 389 (LDAP) and 3268 (LDAP GC) to authenticate between the two servers. This traffic between the two internal servers are being blocked.. I traced it to the system policy (I think). As far as I can see, Under Authentication services / Active Directory... the system policy is only sending out requests, but not allowing anything into the localhost... I have tried creating a new access rule, but no luck... it still denies all this traffic into the isa box... How can I correct this? I am really ready to kick isa in the nuts

Thanks!!

Rudi Groenewald