> -----Original Message-----
> From: Alexandre GALMICHE [mailto:[EMAIL PROTECTED]]
> 
> I am new in all UNIX things and vnc parameters.
That shows.... (no offence)
> 
> If I specify vncserver -nolisten tcp , does this have the 
> quite same effect as vncserver -localhost ?

No, it is a different part of Xvnc: Xvnc has more sides to look at. At the
X11 side the unix system puts the windows into Xvnc. The -nolisten is an
option from this side. See `man X`, `man Xserver` or other X11
documentation. You will find the option on more X11 servers.

The -localhost is an option on the rfb-side: The side of the vnc protocol
between the vncviewer and the vncserver. -localhost only allows connection
from the same machine.

> 
> Actually, I want to use XVNC for an Oracle Problem. In order 
> to avoid a
> security leak on my machine, I wanted to use the localhost 
> option, which does
> not work (see ListenOnTCPPort problem). If I use the nolisten 
> tcp, no client
> will be able to connect because I think that XVNC is working 
> with TCP ports.

You might need both options (and maybe something more) if you realy need to
be secure: -nolisten to avoid hacks from the X11 side, -localhost to avoid
vnc-access from other machines.

Then there is also the X-authority. See the -ac option to Xvnc and the xhost
command at your system.

> 
> Do you think this is acceptable to use the nolisten tcp 
> option instead of localhost option ?

no, as said, use both.

btw. If it is to move around an oracle problem, first get that going, then
start restricting.

CBee
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to