Re: VNC through evil nasty firewall

2001-10-24 Thread Harmen van der Wal
Mark Peterson <[EMAIL PROTECTED]> writes: ... > I've tried using HTTPort to > tunnel, and have also tried using Harmen van der Wal's VNC client (although > even this required learning more about Java than I knew before - now FA rather > than its square root) - I get as far as the password scree

Re: firewall SOCKS https

2001-07-17 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > I have the latest version of ICQ for windows... and the different proxy settings >that are available are as follows SOCKS4, SOCKS5 and HTTPS. only HTTPS >actually works. > This is partially what I am basing my understanding on.. > > All other applic

Re: firewall SOCKS https

2001-07-17 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > Unfortunately SocksCap32 only has support for Socks4 and Socks5 proxies, and I need >support for HTTPS proxies. Is there anything else I can try > This is very confusing. Your wrote: >However, I cannot get past the firewall, which has SOCKS https support..

Re: Java Viewer HTTP patch?

2001-07-16 Thread Harmen van der Wal
Steve Boardman wrote: > > Quoting from the VNC website: > > "Harmen van der Wal has made a patch to the VNC 3.3.3 Java Viewer Source > Distribution, that allows the viewer to connect through a firewall using an > HTTP proxy. This patch is available at > http://ww

Re: firewall SOCKS https

2001-06-14 Thread Harmen van der Wal
"Scott C. Best" wrote: > > Gerard: > Heya. I'd suggest not trying to work-around the > corporate firewall and SOCKS proxy, but rather to use them. That kind of use of a proxy could be excactly what a work-around the corporate firewall is! Of course it all depends on how the proxy is conf

Re: firewall SOCKS https

2001-06-14 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > I would definately like to give it a try... > I suspect Mindterm provides a cleaner solution, so maybe you should try that first. But if you like, you can start by setting up http://www1.tip.nl/~t515027/brandgang/ and testing it with your (Socks) proxy. Then fe

Re: firewall SOCKS https

2001-06-14 Thread Harmen van der Wal
Jonathan Morton wrote: <...> > I would suggest talking to your network admin. If you can't make him > understand what SSH is and why it's a good thing, talk to his manager > about getting a new network admin. Of course, if he has good, logical > reasons why he doesn't want SSH going, that's up

Re: firewall SOCKS https

2001-06-14 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: <...> > >Mindterm is a Java SSH client which supports HTTP proxy, perhaps your firewall > >would allow > >using Mindterm. See http://www.mindbright.se/mindterm The OP is using Socks, but that is also supported by Mindterm. > >I am goign to try it Please let us know

Re: firewall SOCKS https

2001-06-13 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > This place is crazy... why we cant have a transparent firewall I dont know Maybe they had good reasons to support only certain applications. Think about it. > but every protocol except HTTP and FTP are blocked. Protocol or port? Socks doesn't read application-

Re: firewall SOCKS https

2001-06-13 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > Yes, u get the login screen... but it cant get any further as it starts to use > ports 5900 + and this is blocked by the proxy. That makes sense. The browser knows how to use socks, the java applet does not. > > So I still need an viewer with SOCKS htpps support ..

Re: Java Applet from IE - SecurityException connection error

2001-06-08 Thread Harmen van der Wal
Tony Lin wrote: > > Hello all, > > I am using the update versions from "uk.research.at.com". When I use Java > Applet from IE or Netscape to connect to a PC(windows 2000), it has an error > message " com.ms sedurity.SecurityExcepionEx[rfbProto.]: cannot access > "192.9.200.69". 5900". Can someon

Re: Ghosting??

2001-05-23 Thread Harmen van der Wal
Jack Frozt wrote: > > Does anyone know how to Ghost? Like in pcAnywhere. Where you change > something in the registry and you can be on a users computer and they can't > see you. Yet you can still work on it. Also, is there a way to hide the tray > icon? > They say linux is a true multighost op

Re: Connecting to my (small) office network (ADSL problem?)

2001-05-17 Thread Harmen van der Wal
Harmen van der Wal wrote: > > Jan, I think you should bind WinVNC to the dial-up interface. > Sorry, that is probably incorrect. Please ignore. -- Harmen http://www1.tip.nl/~t515027/ - To unsubscribe, send a message

Re: Connecting to my (small) office network (ADSL problem?)

2001-05-17 Thread Harmen van der Wal
Lee Allen wrote: > > > But how do you find out what the right address is?!? According to my > > provider, it is 194.109.244.216. But if I enter this address, VNC doesn't > > find it. > > If you have DSL, there is a very good chance you have a DSL modem/firewall. > And this device is probably per

Re: New User - Dumb Question Disclaimer

2001-05-11 Thread Harmen van der Wal
Nathan Wright wrote: > > I thought the default display for Windows machines was 0, therefore I > was connecting to port 5800 since I read somewhere that was the port > used for login. Then the display was supposed to come through port 5900 > by default. You did the right thing. > Another littl

Re: vnc and encryption...

2001-05-04 Thread Harmen van der Wal
"Stacy D. Coil" wrote: > > I saw that there were patches to the vnc server (a long time ago) that > enabled ssl encryption. Does that still work? > > What I envision is being able to access a vnc server from a web browser > using ssl (i.e. type https://my.vncserver.com:5800/). Is this > possi

Re: Changing port number on VNC Server for NT

2001-05-03 Thread Harmen van der Wal
James ''Wez'' Weatherall wrote: > > > James Weatherall asked "Why do people want to move the VNC port under 100" > > > > Because many of us behind corporate firewall's and Proxy's are only > allowed > > to talk to the outside world on port 80. > > This worries me. Sending VNC through your firew

Re: VNC review from TECHTV

2001-05-02 Thread Harmen van der Wal
Jonathan Morton wrote: > > ><...> > > If there is sufficient > >interest I would be willing to create a "VNC for Dummies and Windows > >Weenies" document. Please let me know if this would be worth while. If I > >don't hear from the group, I won't spend the time re-writing documents for > >the les

Re: Error in connecting server

2001-05-02 Thread Harmen van der Wal
"Schonborg, Thomas" wrote: > > As they say in New England. You can't get there from here. > (Nigel) > But that's what firewalls are there for! if you could bypass the firewall it > wouldn't be much of a firewall. SSH is probably going to be the best bet > I'm not a native speaker, but then wh

Re: Error in connecting server

2001-05-02 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > Hello: > > I have installed VNC Server at y office successfully. When I am trying to > connect it from my home with internet browser by giving http://IPADDRESS:5800 as > address, it is giving me following error: > > java.netNoRouteToHostException: Operation timed ou

Re: JAVA trouble

2001-05-01 Thread Harmen van der Wal
Tetsuji Tsujikawa wrote: > > Dear Sir. > > I am user of VNC. > Please let us have remedy against the following trouble. > > When I access to the server in which VNC is installed by using the Internet >Explorer 5.5 on a client PC, the browser displays the following error message, "java.

Re: Remote Access / alerts

2001-04-18 Thread Harmen van der Wal
Rene Mejorado wrote: <...> > I have a problem with using the vnc viewer over a ras connection. When ever > I logon to our lan and try using the vnc viewer from home it cannot connect > to any workstations on the remote lan. However when I use IE I am able to > connect. I'm concerned about how sec

Re: Icon only VNC

2001-04-18 Thread Harmen van der Wal
Seth Kneller wrote: > > Harmen van der Wal writes: > >Is there a version of VNC that doesn't do anything, but just shows the > >logo? > >I think it is wrong to invade the privacy of my users, so I want to > >discourage visiting porn sites and such, by having th

Re: VNC Invisible

2001-04-18 Thread Harmen van der Wal
Glenn Mabbutt wrote: > > > ...users who have shut down VNC get a personal encounter with > some "sucker rod" [1]. > > [1] - See the syslogd(8) man page on most Linux systems. > > > > The cygwin man page for syslogd has no reference for "sucker rod". Can you > briefly summarize the reference al

Icon only VNC

2001-04-18 Thread Harmen van der Wal
Is there a version of VNC that doesn't do anything, but just shows the logo? I think it is wrong to invade the privacy of my users, so I want to discourage visiting porn sites and such, by having the VNC logo in the taskbar change color in a random fashion;) -- Harmen http://www1.tip.nl/~t515027

Re: secure vnc

2001-04-08 Thread Harmen van der Wal
Darren Evans wrote: > <...> > Has anyone updated mindvnc since mindbright have stopped > supporting/developing it? I don't fully understand how it works > yet. > > Is there any documentation on using mindvnc, since Mindbright > have taken it down? <...> It supports lots of modes of operation,

Re: secure vnc

2001-04-07 Thread Harmen van der Wal
Darren Evans wrote: > > First let me say, i'm aware of Mindbright's Mindvnc which is no longer > supported. Yes, but they seem to be planning a SSH (& SSL) API, so rolling your own secure Java VNC viewer will be easy. (SSH-->RFB / SSL-->RFB) > > I want to run a java vnc client securely from an

Re: Converting display numbers for different ports

2001-04-07 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > [Possibly this should be in the FAQ. It doesn't come up very > often on the list, but two or three people have sent me > emails directly. I'll add it to my VNC page as well.] <...> > > Now the thing is I know that ports 2000 through 2010 are open over TCP. <...>

Re: Win32 - 3.3.3r9 - password exploit?

2001-04-03 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > I am not sure if this has been noticed, or if VNC does not like special > characters as a password, but within the Win version I had set the password > to "QPH@#as9%" without the "". When I use the viewer to access the server I > can use ANY character as the last cha

Re: Setting up win32 vncserver completely from command line?

2001-04-02 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > Of course, if you don't have access to the firewall, or the > administrator perversely refuses to allow SSH connections, you > are SOL. But I would argue that, since you *must* open some > port, all other things being equal, the SSH port (22) is the > best candidate fr

Re: VNC Viewer behind firewall

2001-03-29 Thread Harmen van der Wal
[EMAIL PROTECTED] wrote: > > > Is there a quick and dirty method of getting the viewer to access my home > computer from here at work behind the firewall? Any help would be > appreciated as this has become a vendetta of mine. I am determined to get > this working. :-) > So how about your fi

Re: VNCProxy was (VNC security (uhm... maybe a feature request)?)

2001-03-20 Thread Harmen van der Wal
"Erlichmen, Shay" wrote: > > Wow, our company does the same thing, and we discover the VNC is not very > efficient with multiple connections, so for that propose we wrote VNCProxy. > The proxy connects to the VNC server with a single connection and tunnel the > data stream to its clients. I guess

Re: VNC through a firewall

2001-03-19 Thread Harmen van der Wal
Gordon Steven-QSG001 wrote: > > Some time ago I asked about VNC through a firewall that only allows port 80 > to pass through. The following articles were suggested: > > http://www.uk.research.att.com/vnc/archives/2000-04/0205.html > http://www.uk.research.att.com/vnc/archives/2000-04/0294.html

Re: VNC Viewer behind a firewall/http proxy

2001-03-14 Thread Harmen van der Wal
"S.C.Best" wrote: > > Raji: > Hello! So if I recall the situation correctly...your > workplace firewall only allows a handful of 'standard' ports > thru, like HTTP and FTP, and not something like VNC. >You've > an NT machine behind this firewall at work, and want to VNC > to your home Wi

Re: Separating WinVNC and the Java Appet

2001-03-14 Thread Harmen van der Wal
Dave Drager wrote: > > Kevin, > > I'm not positive but I'm pretty sure that VNC doesn't let you log in to a > server at another IP address. But it does! That's what it's all about;-) > You must serve the page on the computer where > VNC is running. No you don't. You must however host the appl

Re: Separating WinVNC and the Java Appet

2001-03-14 Thread Harmen van der Wal
"Kevin M. Hilscher" wrote: > > Thanks Dave, > > Now I am presented with the applet login. However, now when I login it > gives me the following error message: > > com.ms.security.SecurityExceptionEx[rfbProto.]: cannot connect to > "10.1.0.15" > > Here is the HTML code. Keep in mind that the th

Re: Separating WinVNC and the Java Appet

2001-03-13 Thread Harmen van der Wal
"Kevin M. Hilscher" wrote: > > I would like to separate the Java Applet HTML from the WinVNC server and > load it onto a web server. Then I would like to change some of the > applet default parameters, such as value="Yes"> So you are just separating the HTML, and not the applet... > > I've at

Re: VNC Viewer behind a firewall/http proxy

2001-03-13 Thread Harmen van der Wal
"Scott C. Best" wrote: > > Raji: > Hello! As Harmen wrote, I'm a big fan of: > > > http://www.nocrew.org/software/httptunnel.html <...> > As Harmen suggested, for > something noisy like VNC, follow the README example for > choosing a good buffer-size. If your IT guys at work ever > comp

Re: VNC Viewer behind a firewall/http proxy

2001-03-12 Thread Harmen van der Wal
Janice Adams wrote: > > SET IE TO NOT USE PROXY FOR THIS PARTICULAR ADDRESS > The java vncviewer will not use the browser configured proxy (for 590x/rfb) anyway, and it can not be configured to do so at all. I have been working on a Java vncviewer that does transparently use the browser config

http tunnel java applet patch

2000-12-20 Thread Harmen van der Wal
The 2nd (experimental) release works pretty well, be it still a bit on the slow side. http://www.workspot.net/~harmen/vnc/experimental/ This tunnels RFB over HTTP, without the applet throwing Java security exceptions while using a HTTP proxy. That may come in handy for those who have to bypass p

HTTP tunnel Java applet patches

2000-12-16 Thread Harmen van der Wal
Be prepared for low speeds and long proxy access logs;-) Here's my patches to the Java applet that allows it to use a local proxy without throwing security exceptions. A virtual bidirectional datapath is maintained through multiple HTTP GET & POST requests. For now the server-end is handled by a

Re: HTTP tunneling

2000-12-11 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > Hi, Harmen, > > http://home.earthlink.net/~jknapka/vncpatch.html > > Toward the bottom are patches for Xvnc and WinVNC > that attempt to implement HTTP tunnelling. They > just look for a POST request on the RFB port, > reply with an HTTP "OK", and then start the RF

Re: VNC on port 80

2000-12-09 Thread Harmen van der Wal
"Habermann, David (DA)" wrote: > > You might want to consider that almost all firewalls support CONNECT type > requests on port 443 (HTTPS). > > Dave The current HTTP/VNC applet I have already uses HTTP CONNECT (see link below). The problem with that is Java applet security. -- Harmen Firewa

Re: VNC on port 80

2000-12-08 Thread Harmen van der Wal
Harmen van der Wal wrote: <...> > That would be "Full-duplex Firewall Tunneling with Low Overhead". What > worries me about that, is that "simulative multiplexed communication" by > using HTTP/1.0's GET or POST operator, seems to be the only

Re: VNC on port 80

2000-12-08 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > Harmen van der Wal wrote: > > <...> > > Well, I'm no expert on this, but I've been planning to look into this > > for a while now, and maybe build the ideal firewall Java viewer;-) I > > guess the techiniques

Re: VNC on port 80

2000-12-08 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > Harmen van der Wal wrote: <...> > I understand now. Is there any standard for tunnelling other > protocols over HTTP, or do all of those services use their > own ad-hoc methods? Well, I'm no expert on this, but I've been p

Re: VNC on port 80

2000-12-08 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > Harmen van der Wal wrote: > > <...> > > > The Java applet -- aah. Probably doesn't know it has to go through port > > > 80 to get to the VNC server. It is probably trying to use 5900 or > > > similar. >

Re: VNC on port 80

2000-12-08 Thread Harmen van der Wal
"Joseph A. Knapka" wrote: > > Jon Smith wrote: > > > > I downloaded your patch for win VNC so that i would be able to use VNC at school > > (which has a proxy only allowing some ports like port 80) I changed the port > > setting in the registry to port 80 and i have just tried to access my home

Re: Help... Connecting from office to home

2000-11-30 Thread Harmen van der Wal
"A. Di Santo" wrote: > > Greetings, > > I hope I'm mailing this message to the proper person(s). > > I am one of many people at my office who are behind a proxy server and > firewall. The firewall is a packet-filtering variety which has port 5800 > open. When I use my netscape or I.E. browser t