Re: Port Forwarding -- Checking to be sure I understand it



I'm not sure I follow exactly what you're trying to do. You say you're
providing support for friends/relatives but you want them logging in to
your system. It usually goes the other way around. They run an ssh
server and VNC service. You set up a tunnel from your client to their
server. If you want to run the tunnel over some port other than 22 (the
ssh default) you need to specify the alternate port either in the
ssh_config file, or with the -p option on the command line. The server
must be listening on the same port so that would require a similar
modification to the sshd_config file on the server. This should all be
documented in the sshd man page, or you can just read the comments in
the ssh config files.

For example, say you connect to a VNC server (port 5800 IIRC) on
relative.dyndns.org using port 443 (to get through someone's firewall).
You would first run the VNC and sshd services on the machine your
connecting to and on the client run

ssh -p 443 -L 5800:localhost:5800 userID@xxxxxxxxxxxxxxxxxxx

IIRC there's an option you need to set on RealVNC to allow connections
from localhost too. I use UltraVNC had to do that.

HTH

BTW I would recommend CopSSH instead of sshWindows. The latter hasn't
been updated for close to a year. CopSSH is updated regularly. They're
both free.
.



Relevant Pages

  • Re: Security Breached
    ... I have a typical home network that looks like this: ... on both the DMZ and port forward questions. ... I have the vnc port blocked at the router so I presumed it was safe to ... they done it port forwarding over SSH (if your assumption of only SSH ...
    (alt.computer.security)
  • Re: Should I buy an older imac for my Grandma?
    ... a couple of weeks ago I finally got around to putting VNC Server ... At some point I'll probably protect it with SSH. ... Port forwarding port 22 through the router ...
    (comp.sys.mac.system)
  • Re: RealVNC
    ... I use VNC behind server ... Default listening port for RealVNC server that runs on the machine on ... Then there is default Java listening port on port 5800 on the client ... VNC pops "Trying to connect to remote assistant" ...
    (microsoft.public.windows.server.sbs)
  • Re: DI-524. Cant vnc from inside local network to Internet using a tunnel
    ... I enabled ssh forwarding on this server, ... Which VNC? ... You also need port 5800 forwarded on the server to use the HTTP web ...
    (alt.internet.wireless)
  • Re: DI-524. Cant vnc from inside local network to Internet using a tunnel
    ... >>I have opened up a an ssh port on an internet routeable server at my ... I enabled ssh forwarding on this server, ... > browser version of VNC. ...
    (alt.internet.wireless)