In 9/2003 I was having a mighty struggle with VNC and at the end I wrote up a 
document describing the solution to my problems.  I am sending it to you in 
hopes it helps.  Since it has been 2 years, the problems may be totally 
different, but one can hope ...

Both VNC and TIght VNC are security risks - or were, but this document 
includes port forwarding instructions for Windows to Linux.

On Friday 25 March 2005 08:16 pm, Kevin Toppenberg wrote:
> Mark,
>
> Is tightVNC also a security risk?  Does it use the
> same port?  I think i may have been runing vnc server,
> and tightvnc viewer.  I assume these are different?
>
> Of note, when I ran the apt-get, the first thing it
> did was to uninstall my "obsolete" vnc.
>
> I have done X forwarding before, and it was quite
> painful.  In kate, I would press Ctrl-F for find, and
> then wait 10-15 seconds for the dialog box to draw.
> And I have high-speed internet on both ends.
>
> Also, I was hoping to use my desktop with all its
> icons etc. and also the startmenu.  I hate having to
> remember the path and name of all the apps I want to
> run.
>
> Kevin
>
> --- Mark Street <[EMAIL PROTECTED]> wrote:
> > vncserver listens on 5901
> >
> > That would be vncviewer poweredge.tmedgroup.com:2
> > supply the password for the server and boom.
> > Instant INSECURE access.
> >
> > but why..... when you have a secure way of running
> > graphical applications
> > tunneled through ssh.
> >
> > ssh -Xf [EMAIL PROTECTED] /usr/bin/k3b
> >
> > You only need 1 hole (port 22) through the firewall
> > with that command, pure
> > ssh baby.  We could use port forwarding with SSH to
> > secure VNC...... how
> > about we save that for another day.
> >
> > On Friday 25 March 2005 14:47, Kevin Toppenberg
> >
> > wrote:
> > > I want to use tightVNC on my server so that I can
> >
> > do
> >
> > > remote graphical administration.
> > >
> > > I can run the server.  Here is a screen log:
> > >
> > > [EMAIL PROTECTED] bin]$ ps
> > >   PID TTY          TIME CMD
> > > 24453 pts/1    00:00:00 bash
> > > 24601 pts/1    00:00:00 ps
> > > [EMAIL PROTECTED] bin]$ vncserver -name vistaserver
> > >
> > > New 'vistaserver' desktop is
> >
> > poweredge.tmedgroup.com:2
> >
> > > Starting applications specified in
> > > /home/kdt0p/.vnc/xstartup
> > > Log file is
> > > /home/kdt0p/.vnc/poweredge.tmedgroup.com:2.log
> > >
> > > [EMAIL PROTECTED] bin]$ ps
> > >   PID TTY          TIME CMD
> > > 24453 pts/1    00:00:00 bash
> > > 24610 pts/1    00:00:00 Xvnc
> > > 24630 pts/1    00:00:00 gconfd-2
> > > 24631 pts/1    00:00:00 ps
> > > [EMAIL PROTECTED] bin]$
> > >
> > > But when I try to connect with a tightVNC viewer
> >
> > from
> >
> > > another computer, I get an error "Failed to
> >
> > connect to
> >
> > > server."
> > >
> > > I suspect that my iptables local firewall is
> >
> > blocking
> >
> > > the port.  But how do I determine what port to try
> >
> > to
> >
> > > open?  The TightVNC viewer allows one to specify
> >
> > the
> >
> > > port, but I don't see how to do that on the server
> > > side.
> > >
> > > Thanks
> > > Kevin
> > >
> > > P.S. is this a security risk?  To use this at
> >
> > home, I
> >
> > > would have to expose that port to the internet.
> > >
> > > Kevin
> > >
> > >
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Tired of spam?  Yahoo! Mail has the best spam
> >
> > protection around
> >
> > > http://mail.yahoo.com
>
> -------------------------------------------------------
>
> > > SF email is sponsored by - The IT Product Guide
> > > Read honest & candid reviews on hundreds of IT
> >
> > Products from real users.
> >
> > > Discover which products truly live up to the hype.
> >
> > Start reading now.
>
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
>
> > > _______________________________________________
> > > Hardhats-members mailing list
> > > [email protected]
>
> https://lists.sourceforge.net/lists/listinfo/hardhats-members
>
> > --
> > Mark Street, RHCE
> > http://www.oswizards.com
> > --
> > Key fingerprint = 3949 39E4 6317 7C3C 023E  2B1F
> > 6FB3 06E7 D109 56C0
> > GPG key http://www.oswizards.com/pubkey.asc
>
> -------------------------------------------------------
>
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT
> > Products from real users.
> > Discover which products truly live up to the hype.
> > Start reading now.
>
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
>
> > _______________________________________________
> > Hardhats-members mailing list
> > [email protected]
>
> https://lists.sourceforge.net/lists/listinfo/hardhats-members
>
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Sports - Sign up for Fantasy Baseball.
> http://baseball.fantasysports.yahoo.com/
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> Hardhats-members mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/hardhats-members

-- 
Nancy Anthracite


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Hardhats-members mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/hardhats-members

Reply via email to