> I am behind a country wide firewall.  No ICMP packets can get through and even 
> port 119 is blocked.  Ports 20 ,21, 23, 25, 80 and 110 are open, but I'm not 
> sure about any others as any port scanner tells me all ports (even 80, 20 and 
> 21) are blocked, which is clearly not the case, so I guess they are all ICMP 
> dependent.  Proxy software being run on the firewall machines can vary - 
> mainly mozilla, squid or apache according to VisualRoute reports (of the 
> machine that's blocking the ICMP packets).  Can't use UDP (no VOIP or 
> streaming real content (except by HTTP)).  Can use HTTPort to get news and IM 
> - though they've just opened to messaging.  I'm very keen to use VNC for 
> everything from helping my aging technophobic father out with his computer to 
> accessing unix based molecular biology databases.  


Ugh!  I am almost afraid to ask what country you are in!  (I can
guess...)

Anyway, if port 22 is open, and if you can install an SSH client on
your end and an SSH server on the other end, you can "tunnel"
virtually any connection through the SSH connection.  If the computer
on the other end is any flavor of Unix (including Linux) it probably
already has an SSH server on it; clients are widely available for
Windows.  This will have the added benefit of encrypting the entire
connection.  SSH also includes compression which may make the
connection appear faster in a situation where you have fast computers
and a slow network.  

For details on using VNC with SSH, see this page:

   http://www.uk.research.att.com/vnc/sshvnc.html

Forwarding the VNC session through an SSH connection can also increase
the security of the maching running the VNC server.  The reason is
that when SSH forwards a connection, the connection appears to be
coming from the "localhost" rather than over the network.  Therefore,
you can run the VNC server with the localhost option, and it will
reject all attempts to connect from other machines, and allow only
local connections (including connections forwarded from SSH).

I do this all the time to protect my home PC.  If you need more help
with this and are worried about the "country-wide firewall" people
snooping, you can find my PGP key at
http://home.uchicago.edu/~rabook/rbook-pgp-keys.html

--Robert
  [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, mail [EMAIL PROTECTED] with the line:
'unsubscribe vnc-list' in the message BODY
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to