[THIN] Re: the citrix ssl server you have selected is not acc epti ng connecti ons???

  • From: "Chris Lynch" <lynch00@xxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 24 Jan 2003 10:34:15 -0800

They don't.  What I was saying is that if you do not configure the
Additional Address Translation, your Internal users will get the
connection information for your CSG.  You don't want them to use that.
You want them to make direct connections to your MetaFrame servers.

Chris

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Stansel, Paul
Sent: Friday, January 24, 2003 10:14 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: the citrix ssl server you have selected is not acc
epti ng connecti ons???



Er... why would your internal users need a translated address Chris?
Works fine for me without one in that exact scenario.

-Paul

> ----------
> From:         Chris Lynch[SMTP:lynch00@xxxxxxx]
> Reply To:     thin@xxxxxxxxxxxxx
> Sent:         Friday, January 24, 2003 1:11 PM
> To:   thin@xxxxxxxxxxxxx
> Subject:      [THIN] Re: the citrix ssl server you have selected is
not
> acc epti ng connecti ons???
> 
> 
> If you are going to use CSG for your external clients and your CSG box

> sits in the DMZ, there is no reason why you should be using NAT 
> addresses for your MetaFrame servers.
> 
> What you do is setup Nfuse and CSG in the DMZ.  Make sure there is a 
> route to and from your private network so the Nfuse and CSG servers 
> can talk with the MetaFrame servers.  Make sure you have at least the 
> XML port number you are using, port 80 or whatever port you are using 
> to connect to your STA, and 1494 to your MetaFrame servers.
> 
> In the Nfuse Admin page, make sure you have CSG as the default address

> translation.  Configure the CSG properties at the bottom of that page.

> If you want your Internal users to use the Nfuse page as well, you 
> will need to configure the Additional Address Translation section 
> directly under the Default Address Translation.  This is outlined 
> within the MetaFrame FR2 Admin Guide.  I'll get the page number for 
> you in a little bit.
> 
> Chris
> 
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On 
> Behalf Of Stansel, Paul
> Sent: Friday, January 24, 2003 7:56 AM
> To: 'thin@xxxxxxxxxxxxx'
> Subject: [THIN] Re: the citrix ssl server you have selected is not acc

> epti ng connecti ons???
> 
> 
> 
> I'm wondering... you say you have set the default to CSG and then 
> specified 192.x and 168.x to CSG also.  Why?  What happens if you take

> those two out? Is your internal 10.x network specifically set to use 
> normal communications? What happens if you force it to use CSG as 
> well?
> 
> -Paul
> 
> > ----------
> > From:       Manley, Richard[SMTP:RManley@xxxxxxxxxxxxxxxx]
> > Reply To:   thin@xxxxxxxxxxxxx
> > Sent:       Friday, January 24, 2003 10:49 AM
> > To:         'thin@xxxxxxxxxxxxx'
> > Subject:    [THIN] Re: the citrix ssl server you have selected is
> not
> > acc epti ng connecti ons???
> > 
> > 
> > I wish It was that easy thanks for advice but i am ie6 with128
> > 
> > -----Original Message-----
> > From: Bruce Jarrett-Norton [mailto:bjarrett@xxxxxxxxxxxxxx]
> > Sent: 24 January 2003 15:22
> > To: thin@xxxxxxxxxxxxx
> > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > accepti ng connecti ons???
> > 
> > 
> > 
> > We got this from one site..
> > They were trying from IE 5.0 with 40 bit encryption.. Updated them 
> > to 5.5 with 128 and they were able to get in..
> > 
> > Bruce
> > 
> > -----Original Message-----
> > From: Manley, Richard [mailto:RManley@xxxxxxxxxxxxxxxx]=20
> > Sent: Friday, January 24, 2003 10:07 AM
> > To: 'thin@xxxxxxxxxxxxx'
> > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > accepti ng connecti ons???
> > 
> > 
> > 
> > yes, under server side firewall the default address translation
> > setting is csg (NFUSE 17)
> > 
> > the specific address translation settig are 192,168.0.30=3DCSG  (DMZ
> > address)
> > 
> > i also have a translation map of each internal metaframe server to
> > it's nat address
> > 
> > totally stumped!!!
> > 
> > any other thoughts?
> > 
> > -----Original Message-----
> > From: Stansel, Paul [mailto:Paul.Stansel@xxxxxxxxxxxxx]
> > Sent: 24 January 2003 15:05
> > To: 'thin@xxxxxxxxxxxxx'
> > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > accepti ng connecti ons???
> > 
> > 
> > 
> > Are you suggesting it is trying to make a direct connection to the
> > Citrix servers?  if so, NFuse is not configured to properly pass 
> > traffic to the CSG.  Have you set the default connection type to CSG

> > on NFuse?
> > 
> > -Paul
> > 
> > > ----------
> > > From:     Manley, Richard[SMTP:RManley@xxxxxxxxxxxxxxxx]
> > > Reply To:         thin@xxxxxxxxxxxxx
> > > Sent:     Friday, January 24, 2003 9:57 AM
> > > To:       'thin@xxxxxxxxxxxxx'
> > > Subject:  [THIN] the citrix ssl server you have selected is not
> > > accepting connecti ons???
> > >=20
> > >=20
> > >=20
> > > hello all
> > >=20
> > > implementing CSG,  csg is in DMZ along with seperate nfuse server.
> > >=20  CSG is on a 192 address and the firewall is using nat 
> > >translations yet
> > 
> > > it is still trying to connect a citrix session using the lan
> > >address=20  of 10.1.*.*  I cannot find the setting to make it
connect
> 
> > >on the nat=20  address.  is this something to do with altaddr? =20

> > >would appreciate anyones help.  This has been baffling me all day 
> > >=20  cheers
> > > =20
> > > This e-mail and any attachments are CONFIDENTIAL and may
contain=20
> > > legally privileged information.  If you are not the intended
> recipient
> > 
> > > of this e-mail message, please telephone or e-mail us
> > > immediately,=20 delete this message from your system and do not 
> > > read, copy,=20 distribute, disclose or otherwise use this e-mail 
> > > message and any=20 attachments. Although Heath Lambert believes
this
> 
> > > e-mail and any=20 attachments to be free of any virus or other
> > > defect which may affect=20 your computer, it is the responsibility

> > > of the recipient to ensure that it is virus free and Heath Lambert

> > > does not accept any responsibility for any loss or damage arising
in
> 
> > > any way from its
> > use.
> > > Finally, you should be aware that Heath Lambert reserves the right
> > > and intends to intercept and monitor incoming and outgoing e-mail 
> > > correspondence, so you should not expect any e-mail communications

> > > to
> > be
> > > private in nature.
> > >=20
> > > 
> >
>********************************************************************
> > > This Week's Sponsor: RTO Software - TScale
> > > TScale increases Terminal Server capacity. Get 30-40% more users 
> > >per=20  server to save $$$ and time. Add users now! - Not more 
> > >servers. If=20  you're using Citrix, you must learn about TScale!  
> > >Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> > > 
> > >*******************************************************************
> > >**
> > >=20
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link:
> > > http://thethin.net/citrixlist.cfm
> > >=20
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per
> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale! =20 Free 30-day 
> > eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> >
*********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or=20
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm =20
> > This e-mail and any attachments are CONFIDENTIAL and may contain
> legally
> > privileged information.  If you are not the intended recipient of 
> > this e-mail message, please telephone or e-mail us immediately, 
> > delete this message from your system and do not read, copy, 
> > distribute, disclose
> or
> > otherwise use this e-mail message and any attachments. Although 
> > Heath Lambert believes this e-mail and any attachments to be free of

> > any
> virus
> > or other defect which may affect your computer, it is the
> responsibility
> > of the recipient to ensure that it is virus free and Heath Lambert
> does
> > not accept any responsibility for any loss or damage arising in any
> way
> > from its use. Finally, you should be aware that Heath Lambert 
> > reserves the right and intends to intercept and monitor incoming and

> > outgoing e-mail correspondence, so you should not expect any e-mail 
> > communications to be private in nature.
> > 
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per
> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale! =20 Free 30-day 
> > eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> >
*********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or=20
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per

> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale!
> > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> >
*********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link: 
> > http://thethin.net/citrixlist.cfm
> >  
> > This e-mail and any attachments are CONFIDENTIAL and may contain
> > legally privileged information.  If you are not the intended
recipient
> 
> > of this e-mail message, please telephone or e-mail us immediately,
> > delete this message from your system and do not read, copy, 
> > distribute, disclose or otherwise use this e-mail message and any 
> > attachments. Although Heath Lambert believes this e-mail and any 
> > attachments to be free of any virus or other defect which may affect

> > your computer, it is the responsibility of the
> > recipient to ensure that it is virus free and Heath Lambert does not
> > accept
> > any responsibility for any loss or damage arising in any way from
its
> use.
> > Finally, you should be aware that Heath Lambert reserves the right 
> > and intends to intercept and monitor incoming and outgoing e-mail 
> > correspondence, so you should not expect any e-mail communications 
> > to
> be
> > private in nature.
> > 
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per
> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale!
> > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> >
*********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link: 
> > http://thethin.net/citrixlist.cfm
> > 
> ********************************************************************
> This Week's Sponsor: RTO Software - TScale
> TScale increases Terminal Server capacity. Get 30-40% more users per 
> server to save $$$ and time. Add users now! - Not more servers. If 
> you're using Citrix, you must learn about TScale!
> Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> *********************************************************************
> 
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> 
> 
> ********************************************************************
> This Week's Sponsor: RTO Software - TScale
> TScale increases Terminal Server capacity. Get 30-40% more users per 
> server to save $$$ and time. Add users now! - Not more servers. If 
> you're using Citrix, you must learn about TScale!
> Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> *********************************************************************
> 
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> 
********************************************************************
This Week's Sponsor: RTO Software - TScale
TScale increases Terminal Server capacity. Get 30-40% more users per
server to save $$$ and time. Add users now! - Not more servers. If
you're using Citrix, you must learn about TScale!  
Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
*********************************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm


********************************************************************
This Week's Sponsor: RTO Software - TScale
TScale increases Terminal Server capacity. Get 30-40% more users per
server to save $$$ and time. Add users now! - Not more servers.
If you?re using Citrix, you must learn about TScale!  
Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
*********************************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: