> -----Original Message-----
> From: Damon McMahon [mailto:[EMAIL PROTECTED]]
> 
> This is my first post, and my apologies if this issue has 
> been covered somewhere else [I did search, however!]
> 
> I am using the Java client option of VNC to allow my MacOS X 
> client to 
> connect to the WinVNC server installed on my Windows 2000 gateway.
> 
> This arrangement is working well, but with the Win 2000 host 
> having a direct 
> connection to the internet I am worried about security. I 
> would like to use 
> the AuthHosts feature in WinVNC to deny connections to all 
> other IPs besides 
> the Mac, as at the moment the only thing preventing a 
> connection from an 
> internet host is the firewall [and the WinVNC password, of course].
> 
> However, I cannot get the AuthHosts setting to work with the 
> Java client. 
> Any attempt to implement AuthHosts results in the Java client 
> terminating 
> with the following exception:
> 
> java.io.IOException: Your connection has been rejected.
> 
> I also tried using a setting of -:127.0.0.1 with AuthHosts, 
> thinking this 
> would at least prevent direct connections and force any 
> connections to be 
> via the VNC's built-in HTTP server, but this had the following effect:
> 
> java.net.ConnectException: Connection refused
> 
> Is there a way to implement AuthHosts with the VNC Java client?

General message:
vnc has no security build in.
If you need security, take the next steps:
Get a secure connection with ssh and/or vpn or such
DONT use the java viewer: It requires an additional open port which you
don't want. and abova all, You should not give hackers the tool to access
your machine.
Do use the binary viewer for your viewer platform.

As far as I know, the AuthHosts can be easily spoofed.


CBee
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to