On Fri, 2003-10-31 at 22:03, Ramiro Albarracin wrote:
<snip>
> 
> *** All PC's are running VNC SERVER behind a firewall. Is it possible
to
> configure the VNC Viewer
> in a way that will allow me to access any of the PC's ?? do I need to
make
> any setting changes on the firewall ?
> _______________________________________________

I've been considering a similar problem.

The most secure way I have come up with is to use the port forwarding
features of SSH.  In this way (as far as I know) you only need to allow
the ssh port though the firewall.  Note that I have not tested this at
all and I could be misunderstanding the SSH docs.

For example you could set it up so that when you connect to
localhost:5900 from your computer it goes though the ssh tunnel to the
sshserver:5900 which then forwards the request to workstation1:5900.  A
bit of ASCII ard required


  VNC Viewer
  localhost:5900
       |
       |
      \ /
//////////////      SSH Tunnel       //////////////
/ My Machine / -----------------> / SSH Server /
//////////////                          //////////////
                                                     |
                                                     | sshserver:5900
                                                    \ /
                                             //////////////
                                             / VNC Server /
                                             //////////////
                                            workstation1:5900

Using something like this you would be able to map a local:remote port
combination for every vnc server.  At least in theory.  Take a look at:-

http://www.uk.research.att.com/archive/vnc/sshvnc.html


Regards

Lee W
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to