VNC on SSH???

Jerry78 · 07-16-2003, 01:18 PM

hello,

I was trying to run VNC on ssh and got a question here.

When you VNC to the Linux server via ssh, can someone else still scan and find the vnc port (5901) on the server? Can someone else still be able to use another vnc client and try to connect to the server? Thank you for you guys advise in advance.

david_ross · 07-16-2003, 01:26 PM

You can disable gateway ports in sshd_config so that ssh mapped ports are only visable on the server itself.
EDIT: You could use your firewall (iptables/chains too)

If you start th server with the "-localhost" flag it will only listen on the loopback.

Jerry78 · 07-16-2003, 02:28 PM

Thank you, david_ross.

how do you configure sshd_config to diable gateway ports? Thank you again.

Gary

david_ross · 07-17-2003, 03:20 AM

From "man sshd_config"

Code:

    GatewayPorts
             Specifies whether remote hosts are allowed to connect to ports
             forwarded for the client.  By default, sshd binds remote port
             forwardings to the loopback address.  This prevents other remote
             hosts from connecting to forwarded ports.  GatewayPorts can be
             used to specify that sshd should bind remote port forwardings to
             the wildcard address, thus allowing remote hosts to connect to
             forwarded ports.  The argument must be “yes” or “no”.  The
             default is “no”.

In otherwords delete any references that exist refering to "GatewayPorts" in sshd_config and restart sshd.