[THIN] Re: published apps through firewall.

  • From: "Chris Lynch" <lynch00@xxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 26 Dec 2002 13:55:20 -0800

Paul,

I hear yeah, but that's not correct.  It has been my experience that you
need to add the ALTADDR statement to all of your MetaFrame servers that
are in the same farm.

Chris

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Beckman
Sent: Tuesday, December 24, 2002 12:02 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



I should not have to add a public address for all the servers.  it =
should only have to have one address.  Remember...  If I stop the IMA =
service and then restart it will allow you to connect once but not =
twice.... =20

-----Original Message-----
From: Chris Lynch [mailto:lynch00@xxxxxxx]
Sent: Tuesday, December 24, 2002 1:30 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



Make sure that ALL of your MetaFrame servers have a NAT address on your
firewall, and that you have added the ALTADDR command to ALL of your
MetaFrame server with the correct IP address.  If you are doing PAT on
your firewall, make sure your ALTADDR command's IP address is in the
form of www.xxx.yyy.zzz:pppp, where pppp is the port number.  This goes
for any servers that are in any other Zone's, and any other 1.8 servers
that are "part" of the same farm, even if there are legacey 1.8 servers
that are connected with a license gateway.

Chris

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Beckman
Sent: Tuesday, December 24, 2002 11:09 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



yeup I have done it all.

-----Original Message-----
From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx]
Sent: Tuesday, December 24, 2002 11:36 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



And Paul,  in addition to what Chris mentioned.  You will also need to =
=3D =3D3D change the port used for the server in the address list.
(HTTP/HTTPS) =3D =3D3D under the connections tab.

-----Original Message-----
From: Chris Lynch [mailto:lynch00@xxxxxxx]
Sent: Tuesday, December 24, 2002 10:27 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



Opps.  I mean the Connection Tab.

Chris

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Beckman
Sent: Tuesday, December 24, 2002 9:23 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



I have done what you suggested already...  still no good.

-----Original Message-----
From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx]
Sent: Tuesday, December 24, 2002 11:19 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: published apps through firewall.



A few things...

Close off ports 1604 and 80 (since you mentioned you changed the XML =
=3D3D =3D3D3D3D
port)
Open up the port for XML.
Assign the public address to the firewall and translate it to the =3D
=3D3D3D3D internal ip of the server (the server should only have one IP
address =3D =3D3D =3D3D3D =3D3D3D3D
assigned)
Set the Altaddr on the server.

Other suggestions,  Implement SSL Relay.   Having the XML service open =
=3D
=3D3D
=3D3D3D
=3D3D3D3D
to the public will expose which application are published.

Joe

-----Original Message-----
From: Paul Beckman [mailto:pbeckman@xxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, December 24, 2002 8:13 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] published apps through firewall.


I am running XP on W2k.
I have 1494, 1604, and 80 with a public address translated to my =
=3D3D3D3D internal Citrix IP. I can browse the apps but get an I/O error
when trying to connect. If I put the public address in the server box on
a custom ICA connection =3D3D3D =3D3D3D3D I can connect to the desktop.
If = I =3D stop =3D3D and restart the IMA service I can connect to the
published =3D3D3D3D apps =3D once, but if I disconnect I can not
reconnect. I have also put the XML port on a different port # We do not
have IIS running on this server. and I also created open ports for
another server and the same thing =3D3D3D3D =3D happens. =3D3D I have
been on the phone with = Citrix and no luck. =3D3D3D3D20 Does anyone =3D
have any ideas? =3D3D3D3D20 = Thanks, Paul


***********************************************=3D3D3D3D20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=3D3D3D3D20
Helpdesk is the one-stop solution for all=3D3D3D3D20
your server-based computing needs.=3D3D3D3D20 http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=3D3D3D3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
***********************************************=3D3D3D20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=3D3D3D20
Helpdesk is the one-stop solution for all=3D3D3D20
your server-based computing needs.=3D3D3D20 http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=3D3D3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
***********************************************=3D3D20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=3D3D20
Helpdesk is the one-stop solution for all=3D3D20
your server-based computing needs.=3D3D20 http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=3D3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


***********************************************=3D3D20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=3D3D20
Helpdesk is the one-stop solution for all=3D3D20
your server-based computing needs.=3D3D20 http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=3D3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
***********************************************=3D20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=3D20
Helpdesk is the one-stop solution for all=3D20
your server-based computing needs.=3D20
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
***********************************************=20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=20
Helpdesk is the one-stop solution for all=20
your server-based computing needs.=20
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


***********************************************=20
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support=20
Helpdesk is the one-stop solution for all=20
your server-based computing needs.=20
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
*********************************************** 
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support 
Helpdesk is the one-stop solution for all 
your server-based computing needs. 
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


*********************************************** 
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support 
Helpdesk is the one-stop solution for all 
your server-based computing needs. 
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: