iptables to forward VNC connection to Windows desktop via WAN port

cojo · 06-14-2011, 02:13 PM

I would like to open my Fedora server to connect to Windows box. My Fedora box included 3 NICs WAN(10.22.2.8), LAN1(10.28.2.100), LAN2(10.30.1.1). I would like to VNC on my windows box(10.22.2.*) to Windows(10.28.2.*) and to windows(10.30.1.*).

I am able to ping 10.22.*.* and 10.30.*.* network on my server and I am able to VNC to the server(10.22.2.8).

John

manyrootsofallevil · 06-15-2011, 05:24 AM

Quote:

Originally Posted by cojo

I would like to open my Fedora server to connect to Windows box. My Fedora box included 3 NICs WAN(10.22.2.8), LAN1(10.28.2.100), LAN2(10.30.1.1). I would like to VNC on my windows box(10.22.2.*) to Windows(10.28.2.*) and to windows(10.30.1.*).

I am able to ping 10.22.*.* and 10.30.*.* network on my server and I am able to VNC to the server(10.22.2.8).

John

I'm not sure I understand what the problem is. I'm not even sure what you are trying to do.

Are you trying to VNC from you Fedora server to a windows box or are you trying to VNC from a windows box to another windows box?

cojo · 06-15-2011, 02:51 PM

The Fedora have 3 NICS with connect to 10.22.*.*, 10.28.*.*, and 10.30.*.* network and it a firewall between these network. I would like to VNC from a Windows box on 10.22.2.* to another Windows box on 10.28.*.* and Windows box on 10.30.*.*.

cojo · 06-15-2011, 04:18 PM

I think my problem is more related to routing issue between 3 networks.

manyrootsofallevil · 06-16-2011, 01:57 AM

Quote:

Originally Posted by cojo

I think my problem is more related to routing issue between 3 networks.

If you can ping them, then routing is in place, however, this might be limited to icmp requests, which would explain your problems

Can you post your iptables configuration please (both filter and nat tables)?

fhleung · 01-27-2012, 01:48 AM

Quote:

Can you post your iptables configuration please (both filter and nat tables)?

I using Fedora, in /etc/sysconfig/iptables

Code:

*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT

What I want is connect Windows boxes behind iptables Linux box.

catworld · 01-28-2012, 08:29 AM

Just to clarify the problem, you have 3 networks connected through a fedora server, and you want to be able to VNC from any of the networks to any of the others, correct?

Do you have any interconnectivity between the networks now? Can you ping hosts from one net to another? Access file shares? If not, the problem is the routing, fix that and VNC won't be a problem.

Post the routing tables for the three ifaces.