Topic: Citrix & E-Smith

[jose velez]

I have a citrix server and e-smith and Citrix requires that port
1494 for tcp/ip is open and 1604 for UDP is open inbound.
Also port 1023 and above are opened for TCP and UDP outbound.

Any idea how to open this ports.

Thank You

[guestFF]

Hi, I think this is a ipchains 'thing' but i'm not sure. btw why is citrix demanding these ports, and what king of use are you getting from the combo citrix+e-smith?

regards,

H.F. Wang

[jose velez]

Citrix ICA client thru the Web can run any Windows and almost any DOS application that you publish in Metaframe.  E-Smith will run the gateway to the web and the web server to access the Citrix applications.

From what I have read Ipchains is the solution but need the format and how to run it automatically

Thank you

José Vélez

[Bas Spaans]

Is letting your outside clients making a VPN connection to the e-smith server and using the ICA client over the VPN not a (safer) solutions?
I'm currently using this method to connect to a VNC server on the internal network and everything seems to run ok.

[Jose Velez]

That is one option.  But for demo purpose I what to put in my web page a Point of Sale solution and anyone click it and run it.  In our demo I am not worried about security.

I saw in Esmith how to make the VPN connection.  What do I need in the windows's client? How do I make a VPN connection in Windows to the E-Smith?

Thank You

[Bas Spaans]

Try this section in the manual: http://www.e-smith.org/docs/manual/4.1/admin-remoteaccess.html
It's what got me going with VPN

[Jose Velez]

After I read your first email I read the pages and Installed VPN client in my pc.  I got a error 751 and the updates tells me that I have a wrong version of windows.

[rayw]

If I am correct, I believe you want to have access to the ICA server through the gateway.  

If this is the case you should have a look at ipmasqadm with the portfw option for incomming ports, and I believe you could set up ipchains with masq from the ICA server outbound.

I have done this with Windows Terminal Servers many times

Later,

RayW

[Rod Nankivell]

Can you shed some light on how to get Windows Terminal Server working through E-Smith
I have used ipportfw on port 3389 to an internal private IP without success
Is port 3389 the only port needed?

Rod