Hello,

I am trying to set up VNC on a Fedora Core 5 box. The server is set up correctly, and I am able to connect to it using Java VNC Viewer if I use http://localhost:5801 (the X display I want is :1). I am also able to connect to it on another computer but it must be on the same LAN. Whenever I try to connect to it from the World Wide Web, Java VNC Viewer gives this error message: java.net.ConnectException: Connection refused. Is there some step I missed out or something I did wrong so that it is not accessible via the World Wide Web? I have already opened up the appropriate ports on iptables (ports 5801 and 5901) but it does not work. So what have I missed out?

Oops, problem *partially* solved. It appears that other computers can connect to this computer, but this computer cannot connect to itself when using it's public IP. When using it's private IP (it's on a NAT), or when using localhost or 127.0.0.1, it works. So my next question is, why does it not work when using it's public IP to connect?

When you say "other computers can connect to this computer" do you mean via VNC or some other protocol?

When you refer to it's "public IP" do you mean that this PC is connected to the Internet & is acting as your Internet server/router? If so then why do you then say that it's on a NAT?

Have you tried connecting thru vncviewer instead of going thru http?


This does sound like a firewall config problem. You say you have opened ports 5801 & 5901 but do you have them NAT'ed to the servers local IP & ACCEPT on the FORWARD chain?

Sorry, looks like I wasn't too specific in my previous post. I do mean that other computers can connect via the VNC protocol. This computer is not directly connected to the internet, but through a router. I have forwarded ports 5801 and 5901 to this computer's private IP.

Yes, I have tried connecting through VNC Viewer, but the same error message appears.

Sorry for taking so long to get back to you.

The next step would probably be to see if port 5901 is open to the world. Make sure your firewall/router is configured to allow ALL traffic to access this port, go to https://www.grc.com/x/ne.dll?bh0bkyd2 , click proceed, type 5901 into the text box & click "User Specified Custom Port Probe"

If the result is Stealth or Closed then something is wrong with your firewall/router config, if it says open then we'll have to look a little deeper.

Good luck & let me know how you went.