[ubuntu-uk] Preventing a hack attempt

[Matthew Macdonald-Wallace]

Quoting Jacob Mansfield <cyberjacob at gmail.com>:

> how do I do that?

Assuming that both machines (the VNC Client and the VNC Server) are  
running Linux and the VNC server is on port 5900, then run the  
following command:

ssh -C -L 5900:<vncserver>:5900 <user>@<destination_server> -N &

Then setup your vnc client to connect to port 5900 on localhost.

If the VNC Server is on the same machine that you are ssh'ing into,  
then the command would look as follows:

ssh -C -L 5900:localhost:5900 <user>@<destination_server> -N &

and if the VNC server is running on a different port, just change the  
"5900" to the correct number.

The command basically tells SSH to compress the connection (-C) and  
then open a tunnel (-L) that passes all requests on "5900" on the  
localmachine to port "5900" on the remote machine.  The final flags  
simply tell it not to expect and transmit any input (-N) and  
background the task so that you can reuse the command line window (&).

If you don't want to go through the hassle of setting up the above,  
look at something like Remmina [0] which can handle all the tunnels  
for you.

Kind regards,

Matt

[0] http://remmina.sourceforge.net/

> On 28 August 2010 15:30, Matthew Macdonald-Wallace <
> matthew at truthisfreedom.org.uk> wrote:
>
>> Quoting Jacob Mansfield <cyberjacob at gmail.com>:
>>
>> > I have vnc to my servers, but it's locked down to my work and internal
>> home
>> > addresses only using firestarter. would this be an option for you?
>>
>> Tunnel the VNC over ssh - it's more secure and it makes it much harder
>> for someone to sniff the traffic.
>>
>> M.
>> --
>> Matthew Macdonald-Wallace
>> matthew at truthisfreedom.org.uk
>> http://www.truthisfreedom.org.uk/
>>
>> --
>> ubuntu-uk at lists.ubuntu.com
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
>> https://wiki.ubuntu.com/UKTeam/
>>
>



-- 
Matthew Macdonald-Wallace
matthew at truthisfreedom.org.uk
http://www.truthisfreedom.org.uk/