Re: DI-524. Can't vnc from inside local network to Internet using a tunnel

Jeff Liebermann wrote:

> On 5 Dec 2005 08:42:23 -0800, pete.ange.marshall@xxxxxxxxx wrote:
>
>>Ok. So I know my subject is not super descriptive. Here is my
>>problem.
>>
>>I have opened up a an ssh port on an internet routeable server at my
>>work. I enabled ssh forwarding on this server, and set up some
>>firewall rules to allow the box with ssh connect to my work computer on
>>port 5900.
>
> Which VNC? UltraVNC, TightVNC, or the original?
>
> You also need port 5800 forwarded on the server to use the HTTP web
> browser version of VNC.

He wasn't - he was using an ssh tunnel.
>
>>What really happens, is that I get prompted for my password in vnc, it
>>takes it, and then goes no further.
>
> Sounds like TightVNC. What you're doing is connecting to yourself,
> not the office server with the VNC viewer.

No he's not.

> If you think about it,
> you're creating a "hall of mirrors" effect where you have a local
> viewer trying to display itself inside the local viewer, etc. The
> authors got tired of dealing with this effect and blocked local
> viewing. I can do it with older versions of VNC, but not the current
> incantations.

I can still do that if I want. :-) It would be a serious shortcoming if you
couldn't vnc to localhost. When you're working with Unix boxes, it's
pretty normal to make a link to the server _then_ use vnc.
--
derek
.

Relevant Pages

  • Re: how to change the port vnc is running?
    ... NAT/PAT the vnc traffic from your linux server to the ... ssh tunnel vnc traffic though your linux NAT box. ...
    (Fedora)
  • Re: x2x or other program
    ... between this system and a red-hat server. ... Should I use x2x, VNC, or are there ... windows on your PC? ... Then use SSH X forwarding. ...
    (Ubuntu)
  • SSH Portforwarding mit Putty?
    ... Verbindung laufen lassen kann. ... per VNC mit einer sicheren SSH Verbindung in unser Firmennetzwerk ... Der VNC Server wird auf dem Win NT 4 Server installiert und gestartet. ...
    (microsoft.public.de.security.netzwerk.sicherheit)
  • Re: remote port unlocker - does such a thing exist??
    ... > access to your server. ... enabling/disabling ports. ... Then in order to close down the VNC server I ... > You could get the tried and true SSH server for windows ...
    (comp.security.firewalls)
  • Re: [SLE] Hacking Question
    ... > I have detected recently some users trying to gain access ... > on my server via ssh. ... ssh as guest, admin or test you can try changing your ssh port. ...
    (SuSE)