[THIN] Re: Nfuse with alternate addresses
- From: "Chris De Jongh" <Chris.De.Jongh@xxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 5 Feb 2004 20:25:38 +0100
Jeremy,
I will give it a try and get feedback to you.
Tnx
Chris
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeremy Saunders
Sent: donderdag 5 februari 2004 0:33
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Nfuse with alternate addresses
Hi Chris,
I assume you also have a web publishing rule for the NFuse web site!
You have made the same mistake that everyone makes the first time they do
this with ISA. A Web Publishing rule is a reverse proxy, not a NAT.
Therefore, the NFuse web server will see the request coming from 10.10.10.5
(the ISA Internal NIC), and not from a 192.168.101.x address.
You will actually see this in the IIS logs from the NFuse Web Server.
So in the NFuse config, if you set 10.10.10.5 = Alternate it will work as
expected. You just can't use NFuse from the ISA Server itself. Who cares!
A Server Publishing rule, on the other hand is a NAT so the NFuse web server
will see the request coming from a 192.168.101.x address. But publishing
port 80 using a Server Publishing rule is not a good idea from a security
point of view.
I hope that helps explain what's going wrong.
We do this all the time, so ask more questions if you like.
Cheers,
Jeremy.
-----Original Message-----
From: chris.de.jongh@xxxxxxxxxx [mailto:chris.de.jongh@xxxxxxxxxx]
Sent: Thursday, February 05, 2004 12:29 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Nfuse with alternate addresses
Hello,
Can someone help me with configuring my NFuse to user Alternate addresses.
I'm missing something I think.
Scenario :
Client (W2K)
ip adres 192.168.101.100
|
|
ISA Server
External Ip address 192.168.101.10
Internal ip address 10.10.10.5
Server Publishing rule that allows poort 1494 from 192.168.101.10 to
10.10.10.10
|
|
NFuse Server (WI)
IP Address 10.10.10.2
Configuration
Default address translation setting
Normal address
Specific address translation settings
192.168.101.100 = Alternate
Citrix Server (MFXP FR3/SP3)
IP Address 10.10.10.10
altaddr : Alternate TCP addresses for
Local Address Alternate Address
-------------------- --------------------
10.10.10.10 192.168.101.10
When I start the NFuse webpage I still get the local address in the ica file
instead of the Alternate address.
Why ? How comes ? What do I miss here ?
Tnx for the feedback.
Kind regards,
Chris
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
