> >and connect to it from any computer+OpSys running the VNC viewer;
> >you can also connect using a Web browser.
>
> * firewalls permitting * I'd suggest allowing access from only local
> addresses and from static IPs (if at all possible) to, for example, let
> you connect from your office / holiday home but not allow every hacker a
> chance at connecting using VNC to systems on your network :-) Peter M.
Security is always an issue. For use within a local area network, anyone
running VNC viewer, or even a web browser, can connect to a VNC server
if they know the server machine's address and the password, in the same
way as anyone can log into most networks with username and password.
For connections from outside of the network I always use a Virtual
Private Network, which is reasonably secure. If using a router with VPN
support (eg., the Draytek Vigor range) on the server site, then it is
not necessary to change router firewall settings. SSH should also be OK.
For direct connection across the Internet, the server is as secure as
its password. Don't use a password that can be found in any list to foil
dictionary attacks. However well-chosem, passwords are sent across the
Internet in plaintext (not encrypted) form, and can in principle be
intercepted by an attacker.
It's a big topic -- you could write a book about it.
Best wishes,
--
Michael Salem
|