On Thu, Dec 21, 2000 at 10:34:44AM -0700, Joseph A. Knapka wrote:
> "Erdely, Michael" wrote:
> > 
> > Well... I have to be honest with you, I haven't worked with the Linux
> > version of VNC Server for a while.  And not with SSH.  Maybe it is enabled
> > by default.  Then, I'm not sure why it isn't working.
> > 
> > -ME
> > 
> > ----- Original Message -----
> > From: "Serge Dutremble" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Thursday, December 21, 2000 8:42 AM
> > Subject: Re: VNC and SSH
> > 
> > > I know how to do this with the Windows server but I have not found a
> > switch on
> > > the Linux server to cover that.  Can you expand on how to do this?
> > >
> > > As Jay Freeman suggested to me privately, my problem is not restricted to
> > > VNC port forwarding.  No other ports seem to work either.  I agree with
> > him on
> > > this one and will pursue the issue on an SSH list.
> > >
> > > For the list:
> > >
> > > 1.  I suspect it may be a conflict with my older Linux Mandrake
> > > configuration although I do not think so.  Such conflicts would have been
> > > reported long ago.
> > >
> > > 2.  Another possibility is that my firewall (ipchains on the
> > > Linux server) stops the forwarding.  Does anyone have any
> > > ideas on which ipchain rule must be enabled (on not
> > > disabled) to ensure the ssh port forwarding works?  I have checked the
> > obvious
> > > 58xx and 59xx series but all this work directly anyway.  Anyone know if
> > ssh
> > > uses some other ports for redirection?
> 
> If you get logged in via SSH using the -L blah:blah:blah argument,
> then the forwarding connection has been set up. Since SSH
> multiplexes the forwarded connections over the port-22
> channel, it is not necessary for either firewall to know
> anything about the ports being forwarded. If you can log in to
> the remote host and get an SSH prompt, then forwarding
> should work fine.

now in my case:
Xvnc runs on a host inside the firewall called lets say: INSIDEHOST
the firewall is called lets say FIREWALL
and my ssh login on FIREWALL is called lets say USER

now in order for me to get to my Xvnc on INSIDEHOST i use the following from any box
anywhere in the world (as long as it is connected to the internet and has 
vncviewer and ssh on it):

ssh -l USER -C -L 2333:INSIDEHOST:5901 FIREWALL
# then i do all the login stuff until i get a normal shell prompt on FIREWALL
# then i a different xterm window i connect to my vnc by:
vncviewer put-your-encoding-options-here localhost:2333
# works like a charm, the ssh xterm window will mutter something about port forwarded

> 
> -- Joe
> 
> > >
> > > 3.  The suggestion from Michael to check for
> > > loopback is also possible.  Once I figure out how to allow loopback on the
> > > linux server, I will report to the list with the results.
> > >
> > > Serge.
> > >
> 
> -- Joe Knapka
> ---------------------------------------------------------------------
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> ---------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to