> -----Original Message-----
> From: f m [mailto:[EMAIL PROTECTED]]
> 
> I'm using tightvnc1.2.2 (haven't successfully
> compiled the most recent because of
> http://sourceforge.net/mailarchive/forum.php?
>              thread_id=1161931&forum_id=7154
> but that's a different story).
> 
> I can't find information on disabling
> the http port 590x.  Tried the tightVNC
> man pages and the Xvnc-help.  Google search
> doesn't find anything.  Is this possible
> for a solaris-based VNC server, tight1.2.2?

Little mix here, the http ports are on 580x, the 590x ports are the RFB (==
vnc) communication.

> 
> A 2nd question I have is whether the 590x
> port even poses a security risk, assuming
> that one is not using the -localhost on
> the vnc server.  I realize the best way
> is loopback with ssh, but say that's not
> the situation.  Does the availability of
> 590x pose any more risk than an unloopbacked
> 580x?  Personally, I can't see why it would
> (which brings into question the usefulness
> of disabling the http port 590x).  But then,
> internet security is not my expertise.

If security is an issue, better not use the http/java viewer (which again is
at 580x).
To use vnc, the rfb port (590x) is required (but can be redirected).

To shut-off the webserver at port 580x on unix is easy: not start it. If you
use the vncserver script to start Xvnc, just remove the use of the http*
options or point them to empty/useless locations.

> 
> Finally, would it be difficult to get a
> mailing list host that allows searching?
> What a pity that all this knowledge can't
> be assembled into a searchable database.
> Why not use the same mailing list host as
> the original AT&T group?


Success

CBee
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to