[THIN] Re: the citrix ssl server you have selected is not acc epti ng connecti ons???

  • From: "Stansel, Paul" <Paul.Stansel@xxxxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Fri, 24 Jan 2003 13:41:30 -0500

Ahh, you're talking Specific address translation settings as opposed to the
Metaframe server address translation map.  Yes, I agree :).

-Paul

> ----------
> From:         Chris Lynch[SMTP:lynch00@xxxxxxx]
> Reply To:     thin@xxxxxxxxxxxxx
> Sent:         Friday, January 24, 2003 1:34 PM
> To:   thin@xxxxxxxxxxxxx
> Subject:      [THIN] Re: the citrix ssl server you have selected is not
> acc epti ng connecti ons???
> 
> 
> They don't.  What I was saying is that if you do not configure the
> Additional Address Translation, your Internal users will get the
> connection information for your CSG.  You don't want them to use that.
> You want them to make direct connections to your MetaFrame servers.
> 
> Chris
> 
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf Of Stansel, Paul
> Sent: Friday, January 24, 2003 10:14 AM
> To: 'thin@xxxxxxxxxxxxx'
> Subject: [THIN] Re: the citrix ssl server you have selected is not acc
> epti ng connecti ons???
> 
> 
> 
> Er... why would your internal users need a translated address Chris?
> Works fine for me without one in that exact scenario.
> 
> -Paul
> 
> > ----------
> > From:       Chris Lynch[SMTP:lynch00@xxxxxxx]
> > Reply To:   thin@xxxxxxxxxxxxx
> > Sent:       Friday, January 24, 2003 1:11 PM
> > To:         thin@xxxxxxxxxxxxx
> > Subject:    [THIN] Re: the citrix ssl server you have selected is
> not
> > acc epti ng connecti ons???
> > 
> > 
> > If you are going to use CSG for your external clients and your CSG box
> 
> > sits in the DMZ, there is no reason why you should be using NAT 
> > addresses for your MetaFrame servers.
> > 
> > What you do is setup Nfuse and CSG in the DMZ.  Make sure there is a 
> > route to and from your private network so the Nfuse and CSG servers 
> > can talk with the MetaFrame servers.  Make sure you have at least the 
> > XML port number you are using, port 80 or whatever port you are using 
> > to connect to your STA, and 1494 to your MetaFrame servers.
> > 
> > In the Nfuse Admin page, make sure you have CSG as the default address
> 
> > translation.  Configure the CSG properties at the bottom of that page.
> 
> > If you want your Internal users to use the Nfuse page as well, you 
> > will need to configure the Additional Address Translation section 
> > directly under the Default Address Translation.  This is outlined 
> > within the MetaFrame FR2 Admin Guide.  I'll get the page number for 
> > you in a little bit.
> > 
> > Chris
> > 
> > -----Original Message-----
> > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On 
> > Behalf Of Stansel, Paul
> > Sent: Friday, January 24, 2003 7:56 AM
> > To: 'thin@xxxxxxxxxxxxx'
> > Subject: [THIN] Re: the citrix ssl server you have selected is not acc
> 
> > epti ng connecti ons???
> > 
> > 
> > 
> > I'm wondering... you say you have set the default to CSG and then 
> > specified 192.x and 168.x to CSG also.  Why?  What happens if you take
> 
> > those two out? Is your internal 10.x network specifically set to use 
> > normal communications? What happens if you force it to use CSG as 
> > well?
> > 
> > -Paul
> > 
> > > ----------
> > > From:     Manley, Richard[SMTP:RManley@xxxxxxxxxxxxxxxx]
> > > Reply To:         thin@xxxxxxxxxxxxx
> > > Sent:     Friday, January 24, 2003 10:49 AM
> > > To:       'thin@xxxxxxxxxxxxx'
> > > Subject:  [THIN] Re: the citrix ssl server you have selected is
> > not
> > > acc epti ng connecti ons???
> > > 
> > > 
> > > I wish It was that easy thanks for advice but i am ie6 with128
> > > 
> > > -----Original Message-----
> > > From: Bruce Jarrett-Norton [mailto:bjarrett@xxxxxxxxxxxxxx]
> > > Sent: 24 January 2003 15:22
> > > To: thin@xxxxxxxxxxxxx
> > > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > > accepti ng connecti ons???
> > > 
> > > 
> > > 
> > > We got this from one site..
> > > They were trying from IE 5.0 with 40 bit encryption.. Updated them 
> > > to 5.5 with 128 and they were able to get in..
> > > 
> > > Bruce
> > > 
> > > -----Original Message-----
> > > From: Manley, Richard [mailto:RManley@xxxxxxxxxxxxxxxx]=20
> > > Sent: Friday, January 24, 2003 10:07 AM
> > > To: 'thin@xxxxxxxxxxxxx'
> > > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > > accepti ng connecti ons???
> > > 
> > > 
> > > 
> > > yes, under server side firewall the default address translation
> > > setting is csg (NFUSE 17)
> > > 
> > > the specific address translation settig are 192,168.0.30=3DCSG  (DMZ
> > > address)
> > > 
> > > i also have a translation map of each internal metaframe server to
> > > it's nat address
> > > 
> > > totally stumped!!!
> > > 
> > > any other thoughts?
> > > 
> > > -----Original Message-----
> > > From: Stansel, Paul [mailto:Paul.Stansel@xxxxxxxxxxxxx]
> > > Sent: 24 January 2003 15:05
> > > To: 'thin@xxxxxxxxxxxxx'
> > > Subject: [THIN] Re: the citrix ssl server you have selected is not
> > > accepti ng connecti ons???
> > > 
> > > 
> > > 
> > > Are you suggesting it is trying to make a direct connection to the
> > > Citrix servers?  if so, NFuse is not configured to properly pass 
> > > traffic to the CSG.  Have you set the default connection type to CSG
> 
> > > on NFuse?
> > > 
> > > -Paul
> > > 
> > > > ----------
> > > > From:   Manley, Richard[SMTP:RManley@xxxxxxxxxxxxxxxx]
> > > > Reply To:       thin@xxxxxxxxxxxxx
> > > > Sent:   Friday, January 24, 2003 9:57 AM
> > > > To:     'thin@xxxxxxxxxxxxx'
> > > > Subject:        [THIN] the citrix ssl server you have selected is
> not
> > > > accepting connecti ons???
> > > >=20
> > > >=20
> > > >=20
> > > > hello all
> > > >=20
> > > > implementing CSG,  csg is in DMZ along with seperate nfuse server.
> > > >=20  CSG is on a 192 address and the firewall is using nat 
> > > >translations yet
> > > 
> > > > it is still trying to connect a citrix session using the lan
> > > >address=20  of 10.1.*.*  I cannot find the setting to make it
> connect
> > 
> > > >on the nat=20  address.  is this something to do with altaddr? =20
> 
> > > >would appreciate anyones help.  This has been baffling me all day 
> > > >=20  cheers
> > > > =20
> > > > This e-mail and any attachments are CONFIDENTIAL and may
> contain=20
> > > > legally privileged information.  If you are not the intended
> > recipient
> > > 
> > > > of this e-mail message, please telephone or e-mail us
> > > > immediately,=20 delete this message from your system and do not 
> > > > read, copy,=20 distribute, disclose or otherwise use this e-mail 
> > > > message and any=20 attachments. Although Heath Lambert believes
> this
> > 
> > > > e-mail and any=20 attachments to be free of any virus or other
> > > > defect which may affect=20 your computer, it is the responsibility
> 
> > > > of the recipient to ensure that it is virus free and Heath Lambert
> 
> > > > does not accept any responsibility for any loss or damage arising
> in
> > 
> > > > any way from its
> > > use.
> > > > Finally, you should be aware that Heath Lambert reserves the right
> > > > and intends to intercept and monitor incoming and outgoing e-mail 
> > > > correspondence, so you should not expect any e-mail communications
> 
> > > > to
> > > be
> > > > private in nature.
> > > >=20
> > > > 
> > >
> >********************************************************************
> > > > This Week's Sponsor: RTO Software - TScale
> > > > TScale increases Terminal Server capacity. Get 30-40% more users 
> > > >per=20  server to save $$$ and time. Add users now! - Not more 
> > > >servers. If=20  you're using Citrix, you must learn about TScale!  
> > > >Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> > > > 
> > > >*******************************************************************
> > > >**
> > > >=20
> > > > For Archives, to Unsubscribe, Subscribe or
> > > > set Digest or Vacation mode use the below link:
> > > > http://thethin.net/citrixlist.cfm
> > > >=20
> > > ********************************************************************
> > > This Week's Sponsor: RTO Software - TScale
> > > TScale increases Terminal Server capacity. Get 30-40% more users per
> > > server to save $$$ and time. Add users now! - Not more servers. If 
> > > you're using Citrix, you must learn about TScale! =20 Free 30-day 
> > > eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> > >
> *********************************************************************
> > > 
> > > For Archives, to Unsubscribe, Subscribe or=20
> > > set Digest or Vacation mode use the below link:
> > > http://thethin.net/citrixlist.cfm =20
> > > This e-mail and any attachments are CONFIDENTIAL and may contain
> > legally
> > > privileged information.  If you are not the intended recipient of 
> > > this e-mail message, please telephone or e-mail us immediately, 
> > > delete this message from your system and do not read, copy, 
> > > distribute, disclose
> > or
> > > otherwise use this e-mail message and any attachments. Although 
> > > Heath Lambert believes this e-mail and any attachments to be free of
> 
> > > any
> > virus
> > > or other defect which may affect your computer, it is the
> > responsibility
> > > of the recipient to ensure that it is virus free and Heath Lambert
> > does
> > > not accept any responsibility for any loss or damage arising in any
> > way
> > > from its use. Finally, you should be aware that Heath Lambert 
> > > reserves the right and intends to intercept and monitor incoming and
> 
> > > outgoing e-mail correspondence, so you should not expect any e-mail 
> > > communications to be private in nature.
> > > 
> > > ********************************************************************
> > > This Week's Sponsor: RTO Software - TScale
> > > TScale increases Terminal Server capacity. Get 30-40% more users per
> > > server to save $$$ and time. Add users now! - Not more servers. If 
> > > you're using Citrix, you must learn about TScale! =20 Free 30-day 
> > > eval: http://www.rtosoft.com/Enter.asp?ID=3D79
> > >
> *********************************************************************
> > > 
> > > For Archives, to Unsubscribe, Subscribe or=20
> > > set Digest or Vacation mode use the below link:
> > > http://thethin.net/citrixlist.cfm
> > > ********************************************************************
> > > This Week's Sponsor: RTO Software - TScale
> > > TScale increases Terminal Server capacity. Get 30-40% more users per
> 
> > > server to save $$$ and time. Add users now! - Not more servers. If 
> > > you're using Citrix, you must learn about TScale!
> > > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> > >
> *********************************************************************
> > > 
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link: 
> > > http://thethin.net/citrixlist.cfm
> > >  
> > > This e-mail and any attachments are CONFIDENTIAL and may contain
> > > legally privileged information.  If you are not the intended
> recipient
> > 
> > > of this e-mail message, please telephone or e-mail us immediately,
> > > delete this message from your system and do not read, copy, 
> > > distribute, disclose or otherwise use this e-mail message and any 
> > > attachments. Although Heath Lambert believes this e-mail and any 
> > > attachments to be free of any virus or other defect which may affect
> 
> > > your computer, it is the responsibility of the
> > > recipient to ensure that it is virus free and Heath Lambert does not
> > > accept
> > > any responsibility for any loss or damage arising in any way from
> its
> > use.
> > > Finally, you should be aware that Heath Lambert reserves the right 
> > > and intends to intercept and monitor incoming and outgoing e-mail 
> > > correspondence, so you should not expect any e-mail communications 
> > > to
> > be
> > > private in nature.
> > > 
> > > ********************************************************************
> > > This Week's Sponsor: RTO Software - TScale
> > > TScale increases Terminal Server capacity. Get 30-40% more users per
> > > server to save $$$ and time. Add users now! - Not more servers. If 
> > > you're using Citrix, you must learn about TScale!
> > > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> > >
> *********************************************************************
> > > 
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link: 
> > > http://thethin.net/citrixlist.cfm
> > > 
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per 
> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale!
> > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> > *********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> > 
> > 
> > ********************************************************************
> > This Week's Sponsor: RTO Software - TScale
> > TScale increases Terminal Server capacity. Get 30-40% more users per 
> > server to save $$$ and time. Add users now! - Not more servers. If 
> > you're using Citrix, you must learn about TScale!
> > Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> > *********************************************************************
> > 
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> > 
> ********************************************************************
> This Week's Sponsor: RTO Software - TScale
> TScale increases Terminal Server capacity. Get 30-40% more users per
> server to save $$$ and time. Add users now! - Not more servers. If
> you're using Citrix, you must learn about TScale!  
> Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> *********************************************************************
> 
> For Archives, to Unsubscribe, Subscribe or 
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> 
> 
> ********************************************************************
> This Week's Sponsor: RTO Software - TScale
> TScale increases Terminal Server capacity. Get 30-40% more users per
> server to save $$$ and time. Add users now! - Not more servers.
> If you're using Citrix, you must learn about TScale!  
> Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
> *********************************************************************
> 
> For Archives, to Unsubscribe, Subscribe or 
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> 
********************************************************************
This Week's Sponsor: RTO Software - TScale
TScale increases Terminal Server capacity. Get 30-40% more users per
server to save $$$ and time. Add users now! - Not more servers.
If you?re using Citrix, you must learn about TScale!  
Free 30-day eval: http://www.rtosoft.com/Enter.asp?ID=79
*********************************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: