force VNC over SSH?

[t-bo]

Hi,

It is possible to force only a VNC connection over SSH only? If someone try to connect via VNC (not over SSH) he got denied access.

I'm using Mac OS X Snow Leopard, & last version of Remoter VNC on Ipad 2.

Thank you, & Thanks for this magnific app'

[raf]

If you're connecting from outside of your LAN, all you need to do is not setup port forwarding for VNC (5900), only do it for SSH (port 22).

Hope that helps,

Raf.

[t-bo]

ok thanks

[t-bo]

I tried but it doesn't work, as long as he need the VNC port to be open, even in VNC over SSH wich is logic.

VNC = 5900 only
but VNC over SSH = 5900 + 22 to be open.

[raf]

VNC only: Requires port 5900 to be open

VNC over SSH : Requires only port 22. Port 5900 is not needed. I personally use this all the time, and I don't have port 5900 port-forwarded.
The way it works is that Remoter opens a tunnel inside the SSH connection to talk to VNC, so all traffic goes through the SSH port.

Raf.

[t-bo]

Nope it doesn't work... If I don't forward 5900

It freezes on "Connecting to VNC..." and I'm in 'VNC over SSH".

[raf]

Nope it doesn't work... If I don't forward 5900

It freezes on "Connecting to VNC..." and I'm in 'VNC over SSH".

That shouldn't happen; I'll DM you with some instructions so we can debug this a bit more.

Thanks,

Raf.

[raf]

OK, t-bo were able to identify the issue, and correct it. Here's the main point from our offline conversation:

raf: If your SSH and VNC server are the same machine, you can try specifying localhost for the VNC in Remoter.

t-bo: Yes they are on the same machine, so I specified "localhost" for the VNC it works fine Yeah Maybe you should add a note for other users?

[raf]

OK, t-bo and I were able to identify the issue, and correct it. Here's the main point from our offline conversation:

raf: If your SSH and VNC server are the same machine, you can try specifying localhost for the VNC in Remoter.

t-bo: Yes they are on the same machine, so I specified "localhost" for the VNC it works fine Yeah Maybe you should add a note for other users?