We have the following config NW6.5 sp1a with BM3.8. (for the proxy.cfg see
below)
We work in two ways,
1) Standard Desktop environment with clntrust.exe no problems
2) Citrix environment with cookie authentication. Herewith we came up with
a very stange problem.
A we work from an TerminalServer with the pxyauth.exe installed.
We got the login page correct (with the DNS name of the private network)
When we then authenticate it comes with "Page not Found"
If we remove the [Authentication Subnets] from the proxy.cfg and reload
proxy we not get the Page not found but the cookie also doesn't work. We
can browse)
The other solution is changing the bind sequence in the inetcfg. (By
deleting and reapplying the bind)

inetcfg /View configuration/ Protocol bind command
(private)
BIND IP Q57_1_EII_EII ARP=Yes Mask=255.255.255.0 Address=10.29.200.120
(public)
BIND IP Q57_2_EII ARP=Yes Mask=255.255.255.0 Address=172.24.1.3
If this is the sequence you got the Page not found

If you do this
BIND IP Q57_2_EII ARP=Yes Mask=255.255.255.0 Address=172.24.1.3
BIND IP Q57_1_EII_EII ARP=Yes Mask=255.255.255.0 Address=10.29.200.120
It works, but in the Login pages comes the DNS name of the public
interface (which is configured in the host file)
But now this server send SLP info f.e rconsole to the DA with the public
ip address. Which is not nice but it works



PROXY.CFG
[Log Format]
Delimiter-Character=space

[MiniWeb Server]
Port-Number=1959
Root-Directory=SYS:\ETC\PROXY\DATA

[MiniWeb Server: Mime Types]
Content-Type: text/html=htm,html
Content-Type: text/plain=txt,text,cla,class
Content-Type: image/gif=gif
Content-Type: image/jpeg=jpg,jpeg,jpe,jfif,pjpeg,pjp
Content-Type: image/tiff=tiff,tif
Content-Type: image/x-xbitmap=xbm
Content-Type: video/x-msvideo=avi
Content-Type: video/quicktime=qt,mov,moov
Content-Type: video/x-mpeg2=mpv2,mp2v
Content-Type: video/mpeg=mpeg,mpg,mpe,mpv,vbs,mpegv
Content-Type: audio/x-pn-realaudio=ra,ram
Content-Type: audio/x-mpeg=mpega,mp2,mpa,abs
Content-Type: audio/x-wav=wav
Content-Type: audio/x-aiff=aif,aiff,aifc
Content-Type: application/x-ns-proxy-autoconfig=pac

[Extra Configuration]
EnableTerminalServerAuthentication=1
RedirectHTTPSRequest=1
DoNotSaveMemoryCacheDuringUnload=1
ResBadAddressLoopBreak=1
IgnoreDuplicateChill=1
SaveProxyPerformanceData=1
RestartTimeoutAfterEverySend=1
DoNotResolveNamesBeforeGoingThruHierarchy=1
DoNotCreateFullyQualifiedHostName=1
IgnoreContentLengthCheck=1

[Authentication Subnets]
PrivateSubnet1=10.29.200.0/255.255.255.0
PrivateSubnet2=10.1.0.0/255.255.0.0

[BM Cookie]
BM_Forward_Cookie=0