Re: VNC and PF

2009-04-16 Thread Frank Bax
Yuriy A. Dmitrishin wrote: Looks like it's my mistake. This rule doesn't work when I connecting from my LAN, but only from ext. network. Ah, then it's working properly. From ext network; VNC should be run inside a tunnel since VNC sessions are not encrypted. VNC passwords are sent as pla

Re: VNC and PF

2009-04-16 Thread Stuart Henderson
On 2009-04-16, Yuriy A. Dmitrishin wrote: > Looks like it's my mistake. > > This rule doesn't work when I connecting from my LAN, but only from ext. > network. > > Best, Yuriy A. Dmitrishin. > > http://www.openbsd.org/faq/pf/rdr.html#reflect

Re: VNC and PF

2009-04-16 Thread Yuriy A. Dmitrishin
Looks like it's my mistake. This rule doesn't work when I connecting from my LAN, but only from ext. network. Best, Yuriy A. Dmitrishin.

Re: VNC and PF

2009-04-16 Thread Yuriy A. Dmitrishin
Here's another rule. It redirects port to Remote Administrator (like VNC): # pfctl -s nat|grep 4899 rdr on tun0 inet proto tcp from any to any port = 54545 -> 192.168.0.246 port 4899 This redirection works fine. Putting a "pass" between "rdr" and "on" in my rule doesn't help. Best, Yuriy A. Dm

Re: VNC and PF

2009-04-16 Thread Vadim Zhukov
On 16 April 2009 c. 14:25:38 Yuriy A. Dmitrishin wrote: > Hi. > > I try to redirect VNC port in my LAN: > $ pfctl -s nat|grep 5900 > rdr on tun0 inet proto tcp from any to any port = 59001 -> > 192.168.0.10 port 5900 > > But I cannot connect with VNC-viewer to address 66.66.66.66:59001 > (66.66.66.

VNC and PF

2009-04-16 Thread Yuriy A. Dmitrishin
Hi. I try to redirect VNC port in my LAN: $ pfctl -s nat|grep 5900 rdr on tun0 inet proto tcp from any to any port = 59001 -> 192.168.0.10 port 5900 But I cannot connect with VNC-viewer to address 66.66.66.66:59001 (66.66.66.66 as my ext addr.). Thanks for your help. Best, Yuriy A. Dmitrishin.