Re: Remote access PC support

From: Roberto Sanchez (rcsanchez97_at_yahoo.es)
Date: 02/18/04

  • Next message: Karsten M. Self: "Re: Remote access PC support" 
    Date: Tue, 17 Feb 2004 21:35:04 -0500
To: Joshua Ferraro <jferraro@athenscounty.lib.oh.us>

    Joshua Ferraro wrote:
    >>You can always tunnel the VNC connection through SSH. It's what
    >>I do for those unfortunate times I stuck on a windows machine
    >>(since the VNC viewer and PuTTY are monolithic executables that
    >>don't require administrative privileges to install).
    >
    > Could you expand on how exactly you set that up? I rarely use windows
    > but sometimes I am forced to (like on campus computers). Also, is there
    > an easy way to acomplish the same thing on a linux box?
    >
    > Joshua
    >

    Remote Firewall Local
      Box -----> Box -----> Box
    (Win32) (Linux) (Linux)

    Naturally, if you do not have a firewall box to SSH into first,
    you can go direct to the Local Box.

    1. Get the VNC Viewer
    http://www.realvnc.com/dist/vnc-3.3.7-x86_win32_viewer.zip
    2. Get PuTTY http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe
    3. Double click PuTTY and enter the hostname or IP of your firewall
        box, select SSH, and in "Tunnels" forward local port 10000 (or some
        high number) to localhost:10000. Make the connection. (If you don't
        have an intermediate firewall, forward to localhost:5901. This
        assumes that you have run your vnc server as display:1. Otherwise
        choose port 5900+vnc-display-num. If you use rfb to export your
        primary display, the port is 5900.)
    4. If you are now logged in to an intermediate Linux firewall, execute:
        ssh -L 10000:localhost:5901 user@host, otherwise skip this step.
        See note above about the port numbers.
    5. Double click the VNC viewer icon on the windows box and tell it to
        connect to display localhost:10000.

     From Linux to Linux it looks like this:

    (with intermediate firewall)
    ssh -L 10000:localhost:10000 user@firewall
    ssh -L 10000:localhost:5901 user@box

    (without intermediate firewall)
    ssh -L 10000:localhost:5901 user@box

    $ vncserver :1

    (different xterm)
    vncviewer localhost:10000

    Some gotchas:

    - Make sure you have "Xvnc: LOCAL" in /etc/hosts.allow.
       This makes certain you don't accidentally connect from
       an unsecure remote client, only from a local (to the box)
       connection (like a forwarded SSH connection).
    - Don't forget to start the vnc server, either before leaving
       home (in the case using rfb to export your primary :0 display)
       or on logging into the box.
    - Don't forget to kill the vncserver ("vncserver -kill :1")
       when you finish. It's not good to leave extra services
       running.

    -Roberto 

    


    -- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Karsten M. Self: "Re: Remote access PC support"

    Relevant Pages

    • Re: Remote Desktop Connection
      ... You can try a free two user version of SSL-Explorer to try it out. ... SSL-Explorer also supports a web based RDC and VNC access to desktop PCs on your network. ... OpenVPN is completely free like SSH. ... What if i have a linkys WiFi router, and does not have vpn feature, how could i secure the connection? ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: SSH tunneling/port forwarding and stateful packet inspection
      ... You wrote, several times, that your "packet showed it was SSL" traffic. ... firewall could not see inside the stream because it was encrypted by SSL, ... connection somewhere in this scenario, so I was making sure you understood ... -- then the answer is of course, no. SSH ...
      (comp.security.ssh)
    • Re: FC3 Security
      ... When I said I would eliminate ssh, then they said that they don't ... >>gives out IP addresses and actually owns the network. ... >of services which could be handled by one server and a firewall. ... This is an always-on cellular connection - not ...
      (Fedora)
    • Re: Connecting to a Mac from a remote PC
      ... What kind of connection do you want to do? ... The host machine a Mac has a fixed IP address. ... the best bet is ssh connections. ... The alternative for Screen, keyboard, mouse is VNC and if going ...
      (comp.sys.mac.comm)
    • Re: SSH port forwarding/tunneling question
      ... > firewall which filters out incoming ssh, ... > the ssh client being the VNC server, and the ssh server being the ... I'm hoping I can just set up a putty connection at ...
      (comp.os.linux.networking)