[wplug] iptables, port forwarding and vnc.

[Rick Smith]

On Thu, Mar 11, 2004 at 08:07:12AM -0500, Wise, Jeremey wrote:
> On a side note. VNC does encrypt passwords. I would like to see how you
> tunnel the vnc session through ssh. Reason is I would like something similar
> for RVID access to XP systems which have their own terminal services. 

Say you are running vnc on :2  .  VNC uses 5900 has a port offset.

Log in with one shell.  Leave it running.  That keeps the tunnel going.
ssh -L 5902:<vnc.server.name>:5902 <remote.host>

In a local window

  vncviewer -shared -encodings "copyrect hextile corre rre" :2

The encodings help because vnc acts differently on local sessions
than remote, so you need to let it know it to use the remote settings.

The vnc.server.name and remote.host can be the same machine.  I use it to go
through a firewall box to an internal box running the vnc session, so
mine are different.

-- Rick