XenApp Advanced on 1 windows 2003 SE server in a DMZ, in the Citrix XenApp / Presentation Server forum on BrianMadden.com

I know this is often asked question, but I could not find all anwers.

Situation:
I get a new Proliant Server with Windows 2003 64bit Standard Edition
The server will get 12 GB RAM.
I install some few application and we want to put this standalone server to the DMZ.
Only some few people from other countries will have access to this server and no sensitive data
will be placed to this server.
The easist way now to access it, is using the WebInterface which translates my external IP to my internal DMZ IP address. I used this last time with Citrix XP FR3, but since XenApp is different, I need to know
which ports in the DMZ firewall must be opend to have access. I don't plan to use a CSG. The installaion will be as easy as possible, but still should give some protection.

Can anybody tell me, which port in the DMZ for a XenApp without CSG I must keep open ?
Has anybody such a simple solution in place ?
Or would you recommend an other solution, maybe still to use a CSG ?

Thanks
Chris