vnc over ssh

From: vagabond (adivvy_at_hotmail.com)
Date: 10/26/03 

Date: Sun, 26 Oct 2003 18:44:50 +0000

Hi all

Following the steps outlined at:
http://www.uk.research.att.com/archive/vnc/sshvnc.html on a redhat 9
server which I'm building for a client.

On the server vncserver is setup on display 1, firewall allowing inbound
tcp 5900 & 5800 (ie '<host_name>:1' connects successfully). Can also ssh
into server and run vncviewer successfully.

So, to test, I removed tcp 5900 & 5800 from the firewall. Now running
vncviewer from the local machine doesn't connect (to be expected) but ssh
to the server and run vncviewer from that remote session works
(unexpected).

So if I can connect to the remote machine by ssh and start a vnc session
from there (and have it appear on my local display) why would I want to
use the method outlined on that web page?

I can get it to work both ways but, in my mind, starting the vnc session
from the ssh connection (and being able to remove the well-known ports
5800, 5801, 5900 or 5901 from the firewall) must be more secure.

Finally, why with only 5800 and 5900 open was I able to connect directly
to display 1 using <host_name>:1 ? From what I've read that should require
5901:tcp to be open.

Thanks

John

Relevant Pages

  • Re: Suggestions for a square font?
    ... > ssh -X creates a tunnel from distant_computer to your real X server at ... > the tunneled X display, connecting directly to the X ... Let's say that the first line was for ssh users and the second ... connect through ssh and play a curses game. ...
    (rec.games.roguelike.development)
  • X11 session over ssh, problem
    ... The problem is that I ssh to a server, and then try to run a program that requires an X display. ... But if I do the same to B (i.e. xterm -e ssh B &), then try to run a program like xpdf which uses X, it doesn't work. ...
    (Debian-User)
  • RE: MySQL/PHPMyAdmin on FC3 Connection Problem
    ... // You can disable a server config entry by setting host to ''. ... MySQL server ... MySQL control user settings ... table to describe the display fields ...
    (Fedora)
  • RE: Problem with X server
    ... Try tunneling everything through ssh. ... This gets around the need to use the xhost and export display settings. ... Subject: Problem with X server ... On the local host, type: ...
    (RedHat)
  • Re: Attempting to run remote X app
    ... > I'm attempting to ssh into a central server and run an X app, ... Make sure the ssh server is forwarding X connections: ... DISPLAY environment variable is set), the connection to the X11 display ...
    (comp.os.linux.x)