[squid-users] Re: R: [squid-users] R: [squid-users] Access accross port 1494

To make Citrix works, you need to remove port 1494 from squid conf.
The reason being Cytrix uses its own proprietary protocal, not ssl for the
connection.

For a normal Citrix client (without being launched by website), you only
need to make sure port 1484 is opened in firewall.

As for Citrix client to be launched by website, the Citrix server will
need to use the source ip for authentication. Since you are not running
transparent proxy, it wont cause much problem here.

I suggest you download the Citrix client, go to that site and run some
test to verify...

rgds,
Wei Keong

On Thu, 4 Jul 2002, FRANCO Battista (Baky) wrote:

> 1) yes they are
> 2) i don't know
> 3) yes it's and probably it use a java script
> 4) no i'm not
>
> in my squid.conf i use:
>
> ACL SSL_ports port 1494
>
> and my firewall forwards 1494 port
>
> -----Messaggio originale-----
> Da: Wei Keong [mailto:chooweikeong@pacific.net.sg]
> Inviato: giovedi 4 luglio 2002 12.12
> A: FRANCO Battista (Baky)
> Cc: 'Phillips, Brenden'; squid-users@squid-cache.org
> Oggetto: Re: [squid-users] R: [squid-users] Access accross port 1494
>
> Hi Franco,
>
> What's the exact problem? Please provide more info for us to help...
> 1. you user is behind squid and are unable to access Cytrix server?
> 2. what Citrix client is your user using?
> 3. is it a particular website that will auto launch the Cytrix client?
> 4. are you running transparent proxy?
>
> Rgds,
> Wei Keong
>
> On Thu, 4 Jul 2002, FRANCO Battista (Baky) wrote:
>
> > i open port 1494 on my firewall but it's doesn't work !!!!! :o(((
> >
> > -----Messaggio originale-----
> > Da: Phillips, Brenden [mailto:B.C.Phillips@massey.ac.nz]
> > Inviato: giovedi 4 luglio 2002 11.37
> > A: 'FRANCO Battista (Baky)'; squid-users@squid-cache.org
> > Oggetto: RE: [squid-users] Access accross port 1494
> >
> > Hi
> >
> > > i need to connect at one site on port 1494 (they use Cytrix)
> > > In my squid.con on SSL port ..... i have 1494.
> > > but don't work
> >
> > I'm guessing that 'they' are using the nfuse citrix product which is an
> > java applet that runs as a child process of a browser like IE?! The only
> > part of the process that squid, or http for that matter, has any part of is
> > the download of the applet to the browser. Once the applet is running it
> > makes its own ICA protocol connection on 1494 directly to the citrix server
> > specified on the applet call - no squid, no http, no html.
> >
> > You have to open up your firewall and so do they.
> >
> > YMMV
> >
> > Brenden.
> >
>
>
Received on Thu Jul 04 2002 - 10:08:55 MDT