Rusty:

        Heya. The VNC server only needs one TCP port for the
actual VNC session. The default is 5900, you could change that
to 12345 if you wanted to.
        Alternatively...leave the VNC server alone, and just
change how you're forwarding the port across your firewall. So
have the outside of the firewall port-forward (also called port
mapping) TCP 54321 to TCP 5900 on your server. When you start
up the viewer, just point it at the open port on your firewall
and you'll be good to go.

        In general...trying to "hide" a service in this manner
is about as secure as hiding your house key somewhere on your
front porch. Most trespassers who want to break into anyone's
house will try the door handle and, if it's locked, just move
onto your neighbor. But if someone really wants to break into
*your* house, they'll search the whole porch thoroughly...

cheers,
Scott

> Date: Thu, 25 Apr 2002 06:21:50 -0700
> From: "Wilmes, Rusty" <[EMAIL PROTECTED]>
> Subject: RE: authentication ports
>
> Alex,
>
> That did the trick.  After seeing 5900 I remembered reading it in the doc's
> somewhere.
>
> If we tried to use vnc viewer vs. a browser from the outside and changed the
> port on the server to some obscure 5 digit port would we need to open
> something other than the specific port?
>
> Many thanks!
> Rusty
---------------------------------------------------------------------
To unsubscribe, mail [EMAIL PROTECTED] with the line:
'unsubscribe vnc-list' in the message BODY
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to