vnc - how to connect from remote machine outside of LAN

I have a linux firewall/server at my home office with a small LAN
behind it. I have vncserver access into the linux box from all my
windows machines inside of my network. I was wondering how you could
get access to the linux machine from say my work machine using
vncviewer? Is this possible? What ports/forwarding do I need to
setup to enable this? What are the security implications? Can this
be done through SSH somehow?

thanks.

PS: Please CC: an email to (E-Mail Removed) with your reply


gurka

On 10 Nov 2003 06:06:35 -0800, gurka wrote:
> I have a linux firewall/server at my home office with a small LAN
> behind it. I have vncserver access into the linux box from all my
> windows machines inside of my network. I was wondering how you could
> get access to the linux machine from say my work machine using
> vncviewer? Is this possible? What ports/forwarding do I need to
> setup to enable this? What are the security implications? Can this
> be done through SSH somehow?

Yes. Initiate the connection from work like so:

ssh -L 5906:localhost:5903 remote.linux.machine

The -L option is the relevant thing, setting up 5906 on the local machine
as a port forwarded via ssh to 5903 on the remote machine. Then

vncviewer -encodings "copyrect tight hextile" localhost:6

starts the viewer. The -encodings option is to get compression
appropriate for a non-local connection. On the remote machine, use
/etc/sysconfig/vncservers (or otherwise) to initiate a vncserver on
display :3 on boot-up. That's all there is to it.

Note that use of ssh is only necessary if you want the entire exchange
encrypted. Passwords are never sent clear across the network by VNC,
even if ssh isn't used.

Bob T.

<veröffentlicht & per Mail versendet>

gurka wrote:

> I have a linux firewall/server at my home office with a small LAN
> behind it. I have vncserver access into the linux box from all my
> windows machines inside of my network. I was wondering how you could
> get access to the linux machine from say my work machine using
> vncviewer? Is this possible? What ports/forwarding do I need to
> setup to enable this? What are the security implications? Can this
> be done through SSH somehow?

If you install tightvnc, it works like this (from your work box):
vncviewer -via <ip of your home firewall> <local ip of your vncserver box>:1

Both firewalls (at your work and at home) must allow port 22 for ssh. If
your work firewall does not forward port 22, check if it supports port 443
(https, most firewalls allow this). You can setup a ssh tunnel
ssh-through-https then. Here you find more:
http://www.jfranken.de/homepages/joh...e/ssh3.en.html
http://www.snurgle.org/~griffon/ssh-https-tunnel
Eggert