Re: [tlug] VNC and security

[Dave M G <martin@example.com>]

Scott, Stephen, Edward,

Thank you for your replies.

What I've done is change my Router and Firestarter firewall to use a 
non-standard port for VNC connections. Security through obscurity. And 
of course I have my VNC server password protected.

Next I wanted to set up SSH port forwarding. I think I have set it up 
with the potential to work, but because of my limited understanding, I'm 
not using it right. I'm hoping the kind folks at TLUG will nudge me in 
the right direction in the places I've deviated.

First, I followed these instructions, as the person who wrote this web 
page talks about connecting *to* a VNC server on an Ubuntu machine, 
*from* a Windows machine, which is what I'm doing for now. (I will want 
to connect from an Ubuntu machine as well, but that can wait.)
http://www.brainonfire.net/2006/08/21/vnc-over-ssh/

The only thing I specifically opted not to do was register at no-ip.com. 
Unless I'm mistaken, this is simply optional if one doesn't want to use 
IP numbers. At the very least, IP numbers will suffice while I test out 
the system.

Okay, so all the servers and software have been installed and seem to 
run fine on both my Windows and Ubuntu machines.

On the Windows side, I fire up Putty, and log into my Ubuntu machine on 
port 8443. I log in successfully, my "fingerprint" matches. It all looks 
good, and I see a command prompt.

But, then, this is where I think I'm missing something about the 
concept. I start up the VNC viewer, type in my Ubuntu machine's IP 
address and VNC port, and attempt to log in. It says "connection refused".

First, I don't understand how having the SSH connection up is 
controlling or affecting the VNC viewer.

Second, I'm not sure who is refusing the connection, or why.

Any help would be much appreciated.

ï--
Dave M G
Ubuntu 6.06 LTS
Kernel 2.6.17.7
Pentium D Dual Core Processor
PHP 5, MySQL 5, Apache 2