View Full Version : Using VNC Viewer Over an SSH Tunnel [Step-By-Step]
JayOnThaBeat
2009-08-26, 00:37
Getting VNC set up through an SSH Tunnel between your N8x0 (possibly 770) and your MS Windows PC!
Disclaimer:
If you are not comfortable with altering settings on your pc or using the terminal on your tablet, turn away now.
Note:
I use Windows as my primary OS. Much of this should be adaptable to Linux. (If you use Linux as your primary OS, you're already pretty smart, right? ;))
FYI:
VNC allows you to remotely control a remote PC, provided you have the proper credentials.
SSH is a secure shell that allows you an encrypted connection.
VNC alone has no encryption, and is therefore a security risk. By operating thru an SSH tunnel, you provide encryption to your VNC connection.
The first 3 parts will all be done on your pc.
|-1-| Setting Up a SSH Server on your Windows PC |-1-|
Re: VNC Viewer: Not necessary, but is the only way to establish an SSH tunnel.
Re: SSHFS remote drive mounting: Necessary.
a. Install Copssh
http://sourceforge.net/projects/sereds/files/copSSH/2.1.1/Copssh_2.1.1_Installer.zip/download
This is all pretty straightforward.
During the process it will create a user account. DO NOT delete this account. (I did, then the service stopped working, so I had to reinstall ... :()
b. Activate a user account.
Go over to the Start Menu, and in the Copssh folder, there will be an option to "Activate User."
You can choose any account on the computer. Of course, to really get that great remote usage feeling, you're gonna want to activate your windows account.
MAKE SURE YOU HAVE A PASSWORD ON THE ACCOUNT YOU ACTIVATE!!!
After you select the options for activation (I just leave them as they are), it will prompt you to set a 10 - 30 character passphrase. What you want to do, for awesome security, is open notepad, and type 30 random characters (numbers, letters, #@$ type things, spaces) all mixed up then, copy it and paste it twice into the two boxes. You will never need to remember the passphrase, but the crazier it is, the more secure your tunnel will be (at least, i think.. you might want to save the notepad file just in case... somewhere secure of course, like on a flash drive).
Copssh runs as a service in the background, so the only way to tell if it's running is to use it (after all steps) or run services.msc (which isn't necessary... just assume its running until something leads you to believe otherwise.)
c. Edit Copssh config files
It's just two strings in two files, so relax :)
Navigate explorer to the install directory (Program Files\ICW\ by default). Then open the etc directory.
Open file ssh_config in a text editor (notepad does NOT handle these files well...)
(I personally prefer PSPad ( http://www.brothersoft.com/download-pspad-editor-24977.html ) It seems to work much better AND it doesn't have weird incompatibilities like notepad does.)
One of the first lines under the comments should look like
#Port 22At this point, pick a random 4 digit port number... anything, really (well mostly). Let's say we pick 2222.
You want to make that line read
Port 2222Now save the file, and exit your text editor.
Now, open sshd_config.
Again, find the line
#Port 22and change it to
Port 2222 Now, save that file and exit.
The reason I suggest to change the port, is because port 22 is the default, and if anyone is going to try to get into your system, that's one of the first places they will start.
NOTE: When I refer to Port 2222 in the rest of this guide, I will be referring to that port.
|-2-| Setting up a VNC Server |-2-|
Re: VNC Viewer: Duh! Yes, absolutely necessary.
The three servers I have found are UltraVNC, TightVNC, and RealVNC. They all seem to perform the same functions, it's just a matter of preference and compatibility.
UltraVNC: http://www.uvnc.com/download/1065/1065full.html
TightVNC: http://www.tightvnc.com/download.php
TightVNC mirror driver: http://www.demoforge.com/dfmirage.htm
RealVNC: http://www.realvnc.com/cgi-bin/download.cgi
The following are instructions in regards to UltraVNC.
This is the one that I use, because it seems to be the only one of the three that seems to be fully compatible with VIsta 64bit. By that, I mean that it runs as a service correctly, which means that it loads even if you are not logged in.
It is best to play around with the options once installed (to test what works best for you), but the important ones to set are
Admin Preferences dialog:
VNC Password,
[x] Allow Loopback Connections
Server Properties Page dialog:
Video Hook Driver
Also, you definitely want to make sure your Video Hook (mirror) Driver is working properly. I believe on most systems, it should work by default, but if it isn't, you can download an alternative one (for UltraVNC specifically) from http://sc.uvnc.com/105/drivers.zip .
Want to be very secure?
If you are planning to use VNC over an SSH tunnel (which I highly recommend), you can set UltraVNC to only accept incoming connections from your tablet.
In explorer, goto program files\Ultravnc and edit ultravnc.ini. There will be a line that says AuthHosts=Change it to read AuthHosts=-:+127.0.0.1This will allow only your tablet access to your pc. (Well, technically anyone setup to access your pc that can use localhost:1 to login... for most of you, this is just your tablet).
I did not realize how much of an issue this was until suddenly I received an incoming access request from some random IP address. I had the box come up with a 10 second delay, and then auto accept.... that would not have been good.
If you have your settings set how I have them, I can't imagine why it wouldn't work (that's not to say that it will work...)
If you choose to use another VNC server program, I would imagine you can adapt the above settings to work in that program. The important thing is to find one that works well for you. (I could not really test them properly because VIsta64 = poop).
|-3-| Setting Up a Local Static IP and Port-Forwarding |-3-|
Re: Everything: Necessary!
NOTE:
I have a router. I would imagine that most out there do to. Even if not, you should still be able to adapt my strategy to fit your circumstance. Hopefully..........
a. Setting Up a Local Static-IP
The purpose of this step is to guarantee that your router always assigns the same local IP address to your PC. Otherwise, the Port-Forwarding (later...) will stop working.
Here is a really great guide for this. (I followed the Vista one for obvious reasons...)
For Vista Users (http://www.portforward.com/networking/static-vista.htm)
For XP Users (http://www.portforward.com/networking/static-xp.htm)
Finished? Awesome!
Here's a rundown of what you just did (for those of you reading ahead ;)
You told your network adapter that rather than getting a local IP address automatically, it would demand the same one every time it connects.
For example's sake (for the rest of this guide) we will call the new static ip address 192.168.1.10.
Again, yours will probably be different, but whenever I refer to that IP above (192.168.1.10), I am talking about your new local static IP.
b. Port-Forwarding
For most of us, our good friends over at PortForward. com have made this fairly easy to get started.
(remember your new local static ip address, and your VNC port... you will need it soon!)
First, visit PortForward.com (http://www.portforward.com/), and find your router on the list.
Then, a big advertisement page will pop up. Simply, click "Skip this ad" at the top.
You will be brought to a page where it asks you to select the program you are trying to set up. TightVNC is on the list. (Its settings seem to be universal for VNC servers).
From here, it gives you illustrated instructions on how to set the program up (note that the instructions it gave me told me to open 3 ports, whereas I only really needed to set up port 5900 . Of course, results may vary.
Remember 192.168.1.10? The local static-ip you set up? You're gonna need that during this process!
NOTE: For anyone having issues on this part (maybe your router wasn't on the list...) this is the bottom line of this section:
You are telling your router that trafftic coming in to your.ip.add.ress:2222 and your.ip.add.ress:5900 should point to your local static-ip (192.168.1.10 in my examples). So if you can figure it out how to make it do that, you are all good.
***
So, by now you should have just set up forwarding for VNC. Now, go back and do the same thing for the ssh port [port 2222 (or whichever you chose) from earlier].
c. Opening the Ports on your Firewall
I use Windows Firewall, and all I had to do was go to exceptions, and add ports 2222 (tcp) 5900 (tcp)
Now, reboot your machine!
If all has gone well, your PC is set up!
|-4-| Setting Up Your Tablet |-4-|
This assumes you are establishing the SSH tunnel. IF NOT, then skip the parts regarding SSH and Personal Menu.
a. Install VNC Viewer, openSSH, and Personal Menu on your tablet.
Should all be in Extras.
b. Set up an openSSH Personal Menu Entry
I just want to preface this part by saying you guys are lucky that you don't have to go thru the hell I went thru figuring this out.
I've read through your posts, tried to comprehend your troubles, and even watched daily as you nearly had a mental breakdown because of it. *lol*
So, it's simple now!
Feel free to thank me! (stskeeps isn't the only Karma-whore ;))
1. In personal menu, goto Create a new command (the +).
2. Name it. (SSH Tunnel or something)
3. command to execute =
ssh -L5901:127.0.0.1:5900 your.ip.add.ress -lWinUsername -p 2222 -vSo lemme break this part down
ssh = the command, duh!
-L5901:127.0.0.1:5900 = ...well, i'm still fuzzy... sufficed to say, you base the 5901 and 5900 off of the port you picked for tightvnc. so, if you stuck with 5900, just keep this the way it is. If you picked, say 3000, u'd put 3001 and 3000... get it?
-lWinUsername = (that's a lowercase L)... for example, I put -lJay... get it?
-p 2222 = specifies the port to use. thats the port we set for CopSSH on the pc.
-v = thats just for verbose mode, so you can see what it's doing.
Then, check "Run in terminal", select your icon, and hit save.
***
NOTE that this all assumes highspeed connections. If you are connecting over a super slow DUN connection (like I am also doing over my Boost Phone, in addition to wifi) then create a second PM entry, and repeat all the steps above, adding -C to the command string.
***
Now, to test it!
Go ahead, and run your SSH Tunnel PM entry.
It should prompt you for your windows password. Give it.
Also, at some point, it will ask you if you are sure you want to connect. Type YES of course!
If everything works correctly, u should get a linux prompt. This means, you are now connected via an ssh tunnel to your home pc!
Now, open VNC Viewer.
Hit the connect button (the little connected plug).
For VNC server, enter localhost:1
If all is configured properly, you will be prompted for a password. This is the password set up in TightVNC, the one that allows mouse and keyboard control.
Once that is entered, you will see your desktop!
Ta-Da!
|-5-| Optional Stuff |-5-|
A) Access your PC Files thru the Tablet's Filemanager (by qole)
1. Install sshfs
In a terminal:
sudo apt-get install sshfs2. Follow THESE (http://talk.maemo.org/showpost.php?p=315772&postcount=12) instructions!
B) Set up a free DynDNS.com account
Most people do not have STATIC IP addresses assigned to them by their ISP. That means that every so often, your external IP address changes.
You can use this service to create a [FREE] customized url that will redirect to your currently assigned IP address.
By installing the accompanying software, your DynDNS account is updated whenever your IP address changes.
In short, you can replace the your.ip.add.ress in the SSH tunnel command string with your new custom url and never have to worry about changing it.
C) Create batch files on your PC desktop to easily adjust screen resolution
1. Install 12noon Display Changer ( http://www.12noon.com/files/dc-setup.exe )
2. Create two different batch files on your desktop.
[NOTE: my executable is dc64cmd.exe b/c I am using Vista 64bit. Adjust this accordingly.]
The first, called tabletres.bat:
@echo off
cd "\progra~1\12noon Display Changer"
dc64cmd -width=720 -height=480 -depth=16The 720x480 fits nicely on the tablet screen.
The other, called pcres.bat:
@echo off
cd "\progra~1\12noon Display Changer"
dc64cmd -width=1024 -height=768 -depth=32I use 1024x768 default, adjust accordingly. This is to switch back to after u run tabletres.bat.
These are much easier to access than going thru display properties.
-=*-=*-=*-*=-*=*-=*-*=-**=-*=-*=*-*=-*=*-=*-*=*-=*-*=-*=*-=
Unfortunately, beyond what I have posted in this guide, I don't know what good I will be with troubleshooting. I barely understand it myself.
But, ask anyway, and I'm sure others will answer (others answering my pleas helped me get it working!).
Also, this (http://talk.maemo.org/showthread.php?t=18798&) is the thread that I referenced a lot during my attempts to get it to work (although I didn't get a lot of it... but I'm sure it's just me ;))
Thanks to luca, qwerty12, qole, Addison and anyone else who helped me get this together!
Witness!!!!!!!!!!!!!! :D
Dude that is huge!
Big time thanks chief!
You're a major life saver!
JayOnThaBeat
2009-08-26, 05:59
I just hope it works.
Somebody post back and tell me they got it working or what went wrong.
Thanks so much for typing that up!
Another VNC server / viewer for Windows is RealVNC (http://www.realvnc.com/products/free/4.1/index.html). I prefer it because it handles the startup stuff for you (you don't have to put anything in your start folder) and runs as a service, so it will let you log in remotely.
But I use WinXP, I can't guarantee it works with later versions of Windows...
JayOnThaBeat
2009-08-26, 06:42
Thanks so much for typing that up!
Another VNC server / viewer for Windows is RealVNC (http://www.realvnc.com/products/free/4.1/index.html). I prefer it because it handles the startup stuff for you (you don't have to put anything in your start folder) and runs as a service, so it will let you log in remotely.
But I use WinXP, I can't guarantee it works with later versions of Windows...
Ya, I tried RealVNC first actually, but I couldn't get it configured correctly (couldn't login from the network, which I could do from the beginning with TightVNC).
Actually, there is an option to run TightVNC as a service, but I am not able to log in without the server program already running, so imo it defeats the purpose. (unless I'm doing something wrong, which is very possible.)
You mean you can have the windows user account logged out, then log into it with RealVNC? Interesting....
///EDIT
I'm looking into this. Update possibly in the near future,
pinguino89
2009-08-26, 09:59
I tried it, and , as rDesktop, does not work if i connect via bluetooth or on hotspot other-than-mine... ports are forwarded...i dunno what i can do ç_ç
Use portableapps TightVNC Portable (http://portableapps.com/node/6520) for a VNC solution that limits what gets written to your Windows registry.
JayOnThaBeat
2009-08-26, 16:52
I tried it, and , as rDesktop, does not work if i connect via bluetooth or on hotspot other-than-mine... ports are forwarded...i dunno what i can do ç_ç
That is odd.
I can even connect from my super slow Boost Mobile 19.9kbps DUN hookup.
I wish I was more of a troubleshooter. Are you able to establish the SSH tunnel?
You mean you can have the windows user account logged out, then log into it with RealVNC? Interesting....
Yes, when my XP server reboots due to an "important update" (that Microsoft pushes onto me) reboots the computer without my permission, I can use RealVNC to log back in.
Another cool thing you can do once you get an SSH server onto your Windows computer: you can use sshfs on your tablet to map Windows file folders onto your tablet. So anywhere you can get WiFi (or, if you tether to a phone, anywhere you can get service) you can access your files as though they were on the tablet...
JayOnThaBeat
2009-08-26, 17:51
OK, so I've been peepin the scene (as much of a scene as there is for VNC server software) and I've drawn 3 conclusions.
1. TightVNC seems to get screen data the fastest, but the "run as a service" aspect of it doesn't appear to work in vista. The service starts, and runs, but no VNC logins are possible and the service helper application never starts. Therefore, of course, you have to have your windows account logged in to use it (at least in vista).
2. RealVNC is probably awesome. Unfortunately, no vista support, so there's not much I can do.
3. UltraVNC appears to be the best alternative, because like RealVNC, it runs as a service (and actually works). The screen refresh seems a tad slower than TightVNC, but I'll take that in exchange for being able to login to my windows account.
<updating the guide to add UltraVNC as a server choice>
JayOnThaBeat
2009-08-26, 18:01
Another cool thing you can do once you get an SSH server onto your Windows computer: you can use sshfs on your tablet to map Windows file folders onto your tablet. So anywhere you can get WiFi (or, if you tether to a phone, anywhere you can get service) you can access your files as though they were on the tablet...
Ok, I got sshfs installed, now I am stuck
sshfs [user@]host:[dir] mountpoint [options]
I'm not quite sure about everything after user@host.
Care to help a brotha out?:confused:
You have to ssh in to your server and find the directory you want. On my Windows machine running cygwin and openssh (this sounds like what copssh is, too), there's a directory called /cygdrive that has all of the server's drives under it. So if you want the Windows machine's C: drive, your directory would be /cygdrive/c/ ... So, if you want to map your C: drive, your first part looks like:
sudo sshfs WinUsername@your.ip.add.ress:/cygdrive/c/
You need to be root, so I'm using "sudo" in the example above. You need sudser or easy-debian installed to use that.
As for the tablet's mountpoint, you want somewhere that is visible to the File Manager, so that means somewhere under /home/user/MyDocs ... I have made a directory called "lan" that has all my shares in it. So, you have to first make the directory on your tablet:
mkdir -p /home/user/MyDocs/lan/c
Now you have the mountpoint. Lastly, you need the options. In order to allow everyone to use the shared directory, you have to add "-o allow_other" and if you have a custom port, you add it too.
Here's the final command for our example (using the stuff you've put in your tutorial):
sudo sshfs WinUsername@your.ip.add.ress:/cygdrive/c/ /home/user/MyDocs/lan/c -o allow_other -p 2222
Now you should be able to open your file manager on the tablet, go into "lan" and then "c" and see your Windows machine's C: drive.
JayOnThaBeat
2009-08-26, 18:34
Snap man!
U are, by far, the shi t.
That was awesome.. I need a smoke now!
JayOnThaBeat
2009-08-26, 19:05
@qole
I linked to that post in the guide (and full credit given, of course).
pinguino89
2009-08-26, 19:44
it still gives me "could not connect to the server"....if i use the hom connection (the same of the pc) it's all ok, with ssh, without and with static ip or dynamic...
if I use bluetooth and my nokia e51, nothing...still doesn't connect...
JayOnThaBeat
2009-08-26, 21:13
it still gives me "could not connect to the server"....if i use the hom connection (the same of the pc) it's all ok, with ssh, without and with static ip or dynamic...
if I use bluetooth and my nokia e51, nothing...still doesn't connect...
So... if I get this right...
1. You can establish the tunnel on wifi and over your phone via BT.
2. You can use VNC viewer properly using localhost:1 over wifi.
3. However, when you try to use VNC Viewer while tethered to your phone, it cannot connect?
clarity is key....
JayOnThaBeat
2009-08-26, 21:25
Well, I'm pretty sure I figured out my speed issues.
Apparently you need to have a video hook driver, or a mirror driver, or something to that effect loaded up to make the screen captures more efficient. Well, apparently the drivers that these VNC servers try to load are not 64bit compatible (shocking :-/).
I have already tried TightVNC, RealVNC, and UltraVNC on Vista64 and XP 64.
The only one that is able to load up its hooks (or mirror) driver is TightVNC, and that's the one that has issues with being logged out of windows.
So, I'm going to install XP 32-bit, triple-boot into that, and report back.
Any thoughts / suggestions in the meanwhile would be superb.
JayOnThaBeat
2009-08-27, 01:27
So it turns out that my computer will not allow me to install a 32-bit OS. I tried XP 32 bit and got a BSOD and I tried Vista 32 bit that just gave me some kind of text error msg (too distraught to remember....).
Could it be that I have some sort of supercomputer, sent from the future?
(It is an Acer after all...... :-/)
I guess I'm stuck between a fast VNC server w/o a working service and a relatively slow VNC server that I can log into windows with.
Things could be worse I suppose.
JayOnThaBeat
2009-08-27, 02:43
Muah ha ha!
I've settled on UltraVNC cuz I just figured out how to block all hosts except 127.0.0.1 from gaining access to it.
(I found this to be a necessity when I got a random request for access (thank god I turned that on ;)))
<Adding to the guide>
///EDIT
<ADDED!>
... I got a random request for access (thank god I turned that on ;))) ...
And I had just about figured out your password, too!
JayOnThaBeat
2009-08-27, 06:25
Well it was good timing, that's for sure. I would've never figured out restricting hosts thing otherwise.
You should definitely block the VNC ports (580x & 590x) from the Internet with your router. Otherwise, it is nice to be able to use VNC without SSH within your home LAN. If you haven't restricted access from other local computers, you can even use a Java capable browser and just point your browser at http://server.ip.address:5800 and log in from the browser. At least this works with RealVNC.
JayOnThaBeat
2009-08-27, 06:40
You should definitely block the VNC ports from the Internet with your router. Otherwise, it is nice to be able to use VNC without SSH within your home LAN. If you haven't restricted access from other local computers, you can even use a Java capable browser and just point your browser at http://server.ip.address:5800 and log in from the browser. At least this works with RealVNC.
Oh, I'm not taking any chances!
I've got UltraVNC to only accept incoming requests from 127.0.0.1.
Actually tho, I'm running at pretty high speed over here, so the internet interface speed is about the same as the LAN (at least thru VNC).
||EDIT
I don't even have the port 5800 option enabled. I'm all about the VNC client. I would only use this stuff with my tablet anyway, since my laptop died some time ago (ironically enough which is what led me to discover the N810.)
You can't browse no interwebs on a psp!
Many thanks for creating this thread!
I got it fully functional yesterday. :D
Your lower resolution display setting isn't supported on my computer so I have to go all the way down to 640x480. Oh well. Is there any other Windows program that might feature an 800x480 for a display option?
Anyway, I was wondering what some of you guys are using this for? I have no imagination on what to do with this besides running my UptoDate program. :)
JayOnThaBeat
2009-08-31, 18:49
Many thanks for creating this thread!
I got it fully functional yesterday. :D
Your lower resolution display setting isn't supported on my computer so I have to go all the way down to 640x480. Oh well. Is there any other Windows program that might feature an 800x480 for a display option?
Anyway, I was wondering what some of you guys are using this for? I have no imagination on what to do with this besides running my UptoDate program. :)
The closest resolution I can get is 720x480... I'm sure it varies by graphics card.
I was out and about last week when I noticed <movie that is totally public domain> was now out on dvd. I had totally forgotten about this movie, so I wanted to make sure that it didn't slip my mind before I got home.
So, I busted out my N810, which has a constant data stream (slow-as-sh*t as it may be) from my Boost Mobile phone, and proceded to establish an ssh tunnel with my pc (with compression enabled, b/c it was over DUN) and log in with VNC viewer.
I then ran firefox, opened <torrent site>, and proceded to download <movie that is surely public domain> with <torrent downloading program>.
And, sure enough, by the time I got home, I had my copy of <public domain movie> waiting for me on my HDD.
I did all that with my N810 inside of a Target.
[Granted, it takes a lot of patience operating over a 19.9kbps connection... but it's better than nothing!]
That's a great idea!
Though your <public domain> reference is suspect. *lol*
Thanks for the great suggestion!
JayOnThaBeat
2009-08-31, 19:01
That's a great idea!
Though your <public domain> reference is suspect. *lol*
Thanks for the great suggestion!
To clarify, the movie was Santa Claus Conquers The Martians (http://en.wikipedia.org/wiki/Santa_Claus_Conquers_the_Martians)
;)
To clarify, the movie was Santa Claus Conquers The Martians
Okay. Now you're just compensating! *lol*
Anyway, I was wondering what some of you guys are using this for?
When my wife calls me at work and tells me one of the computers or apps isn't working right, I can remotely see her screen on my tablet and help her figure it out.
I have a PC running an open-source media center hooked up to my TV. At a party on the weekend, when I needed to play Barrett's Privateers (http://www.youtube.com/watch?v=vL8EwN4dsv4) for the traditional drunken singalong portion of the party, I used my tablet's VNC viewer to start the song playing while I was standing on the front porch with the rest of the Midnight Choir ;)
Didn't see this mentioned before in the thread unless I missed it.
TightVNC plus Mirage Driver for TightVNC is instant win!
Recommended Add-ons
* To achieve best performance under Windows 2000, Windows XP and above, download and install DFMirage mirror display driver (free download). TightVNC Server can use this driver to detect screen updates and grab pixel data in a very efficient way.
Without it, playing Solitaire on the computer the cards would streak and stain the screen so I basically was looking at desktop, graphic mush during a game.
Running Nester (NES Emulator) wouldn't even display on the Tablet's screen.
With http://www.demoforge.com/dfmirage.htm installed, zero streaking in Solitaire, faster screen updates, and running a Nintendo game in Nester looks practically perfect. :)
Only downside is that when you first log in, it tends to not display the entire screen for some reason. So I just open and close a full screen web browser or text file and that does the trick.
JayOnThaBeat
2009-09-01, 03:05
The downside to TightVNC is that you can't use it to log in to Windows.
I only use VNC to perform functions on my pc, ie download something or email myself a file, etc.
Mostly, I like to know that my PC isn't sitting there logged in while I'm away.
In any case, very cool, good find.
|||EDIT
<Sigh>
Well, I just tried it on my Vista64 machine........
I tried to install it by itself (to see if it works with UltraVNC), and I got a crazy error.
I re-installed TightVNC, then tried to install it again, and got the same crazy error.
...strange, that it says it's Vista64 compatible.
Oh, well.
Tight VNC let's me log in just fine so I'm not sure what you mean by this.
When I fire up VNC Viewer on the tablet, I'm greeted to my Windows Log in Screen.
I type my password and then it loads up to the Desktop.
With Mirage Driver for TightVNC, it actually played Chrono Trigger on the desktop extremely well!
All I did was double clicked on that install file and it added a new video device driver in my Display Adapter under Device Manager. I'm using Windows XP by the way.
Total bummer it's not working on your end. Hopefully you can problem solve the trouble either by reading their homepage or by asking around. The difference is tremendously considerable! You'll be absolutely stoked if you can get it working!
Well, I'm going to install my CD game Phantom of the Opera on my Desktop tomorrow which requires a 30,000 cycle speed in Dosbox to play correctly. I'll post back on how well I got it running through VNC Viewer.
JayOnThaBeat
2009-09-01, 03:28
Didn't see this mentioned before in the thread unless I missed it.
TightVNC plus Mirage Driver for TightVNC is instant win!
Recommended Add-ons
Hey, but doesn't TightVNC already come with a mirror video driver? I know it didn't work for me, but I assumed that was because I'm running stupid 64bit Vista..... I'm pretty sure I saw an option for it...........
Read the very bottom of this page:
Tight VNC (http://www.tightvnc.com/download.php)
Doesn't look like it comes with the add on but I could be wrong.
I need to head off to bed for now.
About not being able to log in to Windows, ukki actually helped me set up the entire application and didn't follow your instructions that you posted.
Not sure if this will help you, since I don't know what it means, but I'll post it anyway.
http://img136.imageshack.us/img136/8061/tight.png
Cheers!
JayOnThaBeat
2009-09-01, 03:43
I need to head off to bed for now.
About not being able to log in to Windows, ukki actually helped me set up the entire application and didn't follow your instructions that you posted.
:confused::confused::confused::confused::confused:
umm.... I don't get it.
UltraVNC lets me login via the windows login screen, whereas with TightVNC, I cannot. I get disconnected outside of the windows environment, even tho I have it running as a service.
Sorry, I'm a bit of a newb.
We are talking about this log in screen, correct?
http://img525.imageshack.us/img525/8589/screenshot2009083123523.png
If I find time tomorrow, I'll send you some screenshots of my router settings and maybe that will help.
JayOnThaBeat
2009-09-01, 04:00
Tight VNC let's me log in just fine so I'm not sure what you mean by this.
When I fire up VNC Viewer on the tablet, I'm greeted to my Windows Log in Screen.
I type my password and then it loads up to the Desktop.
With Mirage Driver for TightVNC, it actually played Chrono Trigger on the desktop extremely well!
All I did was double clicked on that install file and it added a new video device driver in my Display Adapter under Device Manager. I'm using Windows XP by the way.
Total bummer it's not working on your end. Hopefully you can problem solve the trouble either by reading their homepage or by asking around. The difference is tremendously considerable! You'll be absolutely stoked if you can get it working!
Well, I'm going to install my CD game Phantom of the Opera on my Desktop tomorrow which requires a 30,000 cycle speed in Dosbox to play correctly. I'll post back on how well I got it running through VNC Viewer.
It's a problem with the service. It runs as a service, but then doesn't work outside of the windows environment.
TightVNC service + vista64 = :eek:
whereas, the ultravnc service works fine. and as i've said previously, I am unable to install a 32 bit windows on this pc.
JayOnThaBeat
2009-09-01, 04:02
Sorry, I'm a bit of a newb.
We are talking about this log in screen, correct?
http://img525.imageshack.us/img525/8589/screenshot2009083123523.png
If I find time tomorrow, I'll send you some screenshots of my router settings and maybe that will help.
My router settings are fine. If they weren't, it wouldn't work with UltraVNC.
JayOnThaBeat
2009-09-01, 04:32
Ah HA!
There's an update coming to the main post, involving a multi-windows-platform WORKING mirror driver for UltraVNC (I'm also going to work in everything we've learned here).
Ah HA!
There's an update coming to the main post, involving a multi-windows-platform WORKING mirror driver for UltraVNC (I'm also going to work in everything we've learned here).
Sweet!
So you were able to get that Mirage Driver installed on your Vista machine?
JayOnThaBeat
2009-09-02, 00:33
Sweet!
So you were able to get that Mirage Driver installed on your Vista machine?
Yes and no.
THAT mirage driver installed the display adapter in device manager, but doesn't actually do anything (again, vista 64 = poop).
(Plus I dont want to run TightVNC anyway, b/c of it not running correctly as a service on my machine.)
-==-==-=-=-=
However, I found a mirror/hooks/whatever driver for UltraVNC. Honestly tho, after using it, I don't see a speed difference. I get just the slightest lag (maybe 1 - 1.5 seconds) without it, and I don't see the improvement with it.
In any case, the setup I have works nicely for me. My need for it equals that of having a secure remote control. I think playing games over it would just be a new way for me to kill my battery faster.
I guess with my system config, I should be gearing this more towards the general population, which is why I'm gonna try workin the stuff you've found into the guide. I'm just having a slow time of it because I quit smoking yesterday and have been finding random, ever-changing ways to distract myself (the gum sure helps).
It will get done... at some point, probably soon.
I get just the slightest lag (maybe 1 - 1.5 seconds) without it, and I don't see the improvement with it.
Well shoot!
I just naturally assumed that if you were able to install that driver correctly that you would get similar results that I was seeing on my end with this.
And I'm like you as well, I have really no interest in playing any games from my desktop.
But you know how it is, you find something new and suddenly you feel this need to give it a few stress tests to see how far you can push the concept.
Apparently, with this added driver installed on my Windows machine, it can pretty much handle anything I throw at it now.
Sorry, that you didn't get the same experience.
JayOnThaBeat
2009-09-02, 05:05
Sorry, that you didn't get the same experience.
I don't get it.
By lag, I mean the time between it happening on my pc and when it happens over vnc viewer. It's not sluggish or anything.
I also have killer upstream speed, so maybe thats why.
From what your saying, you're assuming mine doesn't work as well as yours.... does yours show things on the vnc viewer that you haven't done on the pc yet?
Cuz, THEN I'd be jealous...
:confused:
I really wish I could show you before and after pictures in regards to that add on, driver update.
Even better, offering you a video demonstration.
Subjectively, I would say that I'm getting twice the speed.
If you think about it, having double the performance is huge!
Overall though, I would say the experience of logging into my computer after that driver update on my tablet is now about 20 times better.
It's a shame you didn't get similar results.
JayOnThaBeat
2009-09-02, 05:17
So how slow was it before?
I have satisfactory / "as-good-as-i-would-expect" speed right out of the gate.
I'll try to keep this simple.
If you can play Solitaire (not sure if Vista has this as a default game) in real time, like you're actually playing it on your original computer, without any graphic weirdness, then you're getting the same results I'm seeing on my end.
JayOnThaBeat
2009-09-02, 05:35
I'll try to keep this simple.
If you can play Solitaire (not sure if Vista has this as a default game) in real time, like you're actually playing it on your original computer, without any graphic weirdness, then you're getting the same results I'm seeing on my end.
Actually, Solitaire has been my first test for all the VNC stuff I've been doing. It plays fine.... like, sitting at a real computer, and everything...
Now I wish I could get a 32-bit Windows to install on my PC. I wonder what 20x better than good is......
|||EDIT
OooooOh, I just tried Skitchin' on my Gens emulator over VNC... awesomeness... unfortunately, I can't seem to get it working with anything but my pc gamepad (attached to my pc, sadly), so I had to use that. Still looked pretty sweet tho.
Again, not really wanting to kill battery like that. Just wanted to see if it would work.
I wonder what 20x better than good is......
Not sure why I'm seeing such a huge swing in performance.
Maybe it's because my Windows machine has a standard Intel display chip with no additional drivers or graphic cards installed.
Who knows.
Anyway, I've got a couple of questions for ya.
I'm having some slight difficulty double clicking folders and files on the tablet. Is there an option I can change on my home computer to make this any easier?
In VNC Viewer, where can I delete the history IP addresses? I have a ton of them back when I didn't know what I was doing. :D
Lastly, is there any possible way to have VNC Viewer display a specific part of the screen upon start up? For example, like the extreme bottom left.
Thanks ahead!
JayOnThaBeat
2009-09-02, 20:35
Not sure why I'm seeing such a huge swing in performance.
Maybe it's because my Windows machine has a standard Intel display chip with no additional drivers or graphic cards installed.
Who knows.
Well, I'm not exactly sure about how it would come into play, but I do have an nvidia card with 512mb ram onboard and all the latest drivers and whatnot...
As far as the clicking goes, you could probably change the double-click speed setting in windows control panel > mouse (or whatever).
What I do, is just get the icon I want highlighted, and hit enter on the n810 kb.
As far as the other questions, you should refer to the documentation of whichever VNC software you are using.
Hey qole!
You have to ssh in to your server and find the directory you want. On my Windows machine running cygwin and openssh (this sounds like what copssh is, too), there's a directory called /cygdrive that has all of the server's drives under it. So if you want the Windows machine's C: drive, your directory would be /cygdrive/c/ ... So, if you want to map your C: drive, your first part looks like:
So I need to install a Windows version of Cygwin and OpenSSH on my home computer to access files on the hard drive? Am I reading this correctly?
JayOnThaBeat
2009-09-05, 23:16
Hey qole!
So I need to install a Windows version of Cygwin and OpenSSH on my home computer to access files on the hard drive? Am I reading this correctly?
CopSSH sets up cygwin + openssh.
Okay!
Cool!
I already have that on my Desktop but haven't fired up the installation for it yet.
I was wondering why that was there. :)
Hey, someone who thought that they were "cooler" than you changed up your instructions.
I just followed what I was being told to do. :)
And yeah, I'm not using SSH to gain access to my computer.
I figure that there's nothing of interest on my hard drive anyway so no real reason for it to be encrypted or secured.
JayOnThaBeat
2009-09-05, 23:33
Hey, someone who thought that they were "cooler" than you changed up your instructions.
I just followed what I was being told to do. :)
And yeah, I'm not using SSH to gain access to my computer.
I figure that there's nothing of interest on my hard drive anyway so no real reason for it to be encrypted or secured.
SSH is where it's at.
CopSSH was actually the easiest part of the whole setup. Super straight-forward installer which does pretty much everything except activating the windoze acct you want to use.
|||EDIT
Well like I said, when I first got it all setup, I received a random incoming connection to my VNC server ... that was semi-scary.
JayOnThaBeat
2009-09-11, 04:25
OK, I just totally revamped the guide (post #1).
It actually got bigger... 15,000 characters exactly!
I *think* I worked in everything I've learned about the subject.
Thanks for the update!
If it weren't for this thread, I never would have had the guts to install all of this junk. :)
Hey, got any good suggestions on a poker site that I could use this with?
There's so many out there...
allnameswereout
2009-09-20, 07:13
Instead of CopSSH you can install Cygwin. This yields you additional utilities, allowing you to configure your Windows machine more UNIX-like :D
With a full Cygwin environment you can be sure you can update to the latest OpenSSH version. My experience with 3rd party OpenSSH servers is that they are not kept up to date, or are abandoned. Also, you won't get conflicts with different cygwin.dll.
You can also use RDP (over SSH) instead of VNC. RDP is pretty efficient. I use NX (over SSH) and can use RDP/VNC from there (VNC for Mac).
VNC was made for on LANs. Not Internet. RDP and NX also have other advantages such as Sound, Printer, File Sharing support. And RDP server runs even when you are not logged in (as service).
SSHFS is neat, but I don't remember if it supports locking, nor do I remember about its efficiency. If your connection gets b0rked your shell will hang.
If you have the bandwidth, which by the sounds of it you do, simply set up a VPN (using e.g. OpenVPN) and call it a night. Everything will work as if you are on LAN. Downside is that there isn't an OpenVPN client for Symbian so I had to set up IPsec as well. [...]
You could use SSH, wget the torrent, and have e.g. rTorrent (or uTorrent, Vuze) watch ~/Desktop then there is no GUI required. Requires less bandwidth.
allnameswereout:
Could you link to the NX or RDP clients for the tablets? That would be very helpful.
Another very helpful thing to do would be to start a new thread detailing how, step-by-step, someone could set up a VPN (with Windows) and then connect to it with their tablet.
Seriously. Be helpful.
allnameswereout
2009-09-20, 10:45
Well, VPN set up is quite a generic term.
OpenVPN should work on Windows Vista or Windows 7 http://snowulf.com/archives/622-OpenVPN-on-Vista-64bit-And-Windows-7!.html
OpenVPN and Vista might have a problem with UAC as described here http://forums.untangle.com/openvpn/5171-vista-x64-ultimate-works.html
NX client (Qtnx) howto https://wiki.evolvis.org/nx-mobile/index.php/Main_Page
Pyrdesktop howto http://talk.maemo.org/showthread.php?t=22716
Quick overview of differences between technologies http://talk.maemo.org/showthread.php?t=22763&highlight=freenx
I know CopSSH is Cygwin based. As soon as you start using more 3rd party Cygwin applications you'll run in DLL hell. I know CopSSH is OpenSSH 5.2p, but my experience with previous OpenSSH ports for Windows is that they are abandoned. By using Cygwin you easily are able to keep your Cygwin software centralized and up to date, while allowing other UNIX utilities to be installed. Using wget to grab a torrent while logged in with Terminal is just one example.
I don't have a tablet right now, and I wouldn't use VPN on Windows, but the howto I used to set up OpenVPN was https://help.ubuntu.com/community/OpenVPN
Also, RDP and NX clients do the resizing auto.
I've been reading this thread and trying to follow the instructions carefully, but I can't seem to get past step one. When I try to ssh into my computer, I get the response:
/etc/ssh.ssh_config line 50: Unsupported option "GSSAPIAuthentication"
/etc/ssh.ssh_config line 51: Unsupported option "GSSAPIDelegateCredentials"
ssh: connect to host 192.168.2.20 port 2222: No route to host
I have checked with the PFPortChecker that the ports are open(5800 & 5900), and that I edited the CopSSH ssh_config and sshd_config files were edited, uncommenting the port line to "port 2222" to no avail.
Any help will be greatly appreciated!
allnameswereout
2009-09-30, 20:54
I've been reading this thread and trying to follow the instructions carefully, but I can't seem to get past step one. When I try to ssh into my computer, I get the response:
/etc/ssh.ssh_config line 50: Unsupported option "GSSAPIAuthentication"
/etc/ssh.ssh_config line 51: Unsupported option "GSSAPIDelegateCredentials"
ssh: connect to host 192.168.2.20 port 2222: No route to host
I have checked with the PFPortChecker that the ports are open(5800 & 5900), and that I edited the CopSSH ssh_config and sshd_config files were edited, uncommenting the port line to "port 2222" to no avail.
Any help will be greatly appreciated!This means there is no route to 192.168.2.20/32, which is a private IP address.
You might have configured your WiFi as DMZ, not allowing traffic to/from WiFi to LAN.
Also, when you are out and about you will want to SSH to your _external_ IP address.
Thanks for the quick response guys!
I did first go through all the other steps before trying this, and I have also rebooted my system since then a few times.
And I've just checked the DMZ settings on the routers settings page, and I followed these instructions (I'm doing this from home, using the same wifi as my laptop):
DMZ
The DMZ feature allows you to specify one computer on your network to be placed outside of the NAT firewall. This may be necessary if the NAT feature is causing problems with an application such as a game or video conferencing application. Use this feature on a temporary basis. The computer in the DMZ is not protected from hacker attacks. To put a computer in the DMZ, enter the last digits of its IP address in the field below and select "Enable". Click "Submit" for the change to take effect.
So I did, but got the same response. Also, I have the built-in router firewall turned off, so I'm not sure this would be the problem.
Thinking about the last line on allnameswereout's post, I tried to ssh with my external ip address (even though both laptop and n810 are using the same wifi router), and this time it did request my password, but then immediately logged me out.
here is the command I used:
ssh -L5901:127.0.0.1:5900 155.174.211.137 -lMauricio -p 2222 -v
and here is the output:
OpenSSH_5.1p1 Debian-6.maemo2, OpenSSL 0.9.8e 23 Feb 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
/etc/ssh/ssh_config line 50: Unsupported option "GSSAPIAuthenticati on"
/etc/ssh/ssh_config line 51: Unsupported option "GSSAPIDelegateCred entials"
debug1: Connecting to 155.174.211.137 [155.174.211.137 ] port 2222.
debug1: Connection established.
debug1: identity file /home/user/.ssh/identity type -1
debug1: identity file /home/user/.ssh/id_rsa type -1
debug1: identity file /home/user/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenS SH_5.2
debug1: match: OpenSSH_5.2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.1p1 Debian-6.maemo2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '[155.174.211.137 ]:2222' is known and matches the RSA host key.
debug1: Found key in /home/user/.ssh/known_hosts:3
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keybo ard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/user/.ssh/identity
debug1: Trying private key: /home/user/.ssh/id_rsa
debug1: Trying private key: /home/user/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keybo ard-interactive
debug1: Next authentication method: password
Mauricio@155.174.211.137's password:
debug1: Authentication succeeded (password).
debug1: Local connections to LOCALHOST:5901 forwarded to remote add ress 127.0.0.1:5900
debug1: Local forwarding listening on 127.0.0.1 port 5901.
debug1: channel 0: new [port listener]
socket: Address family not supported by protocol
debug1: channel 1: new [client-session]
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: Sending environment.
debug1: Sending env LANG = en_US
debug1: Sending env LC_MESSAGES = en_US
Last login: Wed Sep 30 17:42:35 2009 from 155.174.211.137
debug1: client_input_channel_req: channel 1 rtype exit-status reply 0
debug1: client_input_channel_req: channel 1 rtype eow@openssh.com r eply 0
debug1: channel 1: free: client-session, nchannels 2
debug1: channel 0: free: port listener, nchannels 1
Connection to 155.174.211.137 closed.
Transferred: sent 1824, received 2136 bytes, in 0.4 seconds
Bytes per second: sent 4450.4, received 5211.6
debug1: Exit status 1
Thanks for the ideas, but I'm still hoping for more!
allnameswereout
2009-09-30, 22:14
jmc8501, I meant that you probably had DMZ on. Can you check your N810 IP address and your Windows computer IP address are in the same subnet? Probably, your WiFi gets 192.168.2.0/24 and your LAN gets 192.168.1.0/24.
In the second command you pasted, you were able to connect to connect from WAN to your SSH server on external_ip:2222. The fact you are immediately logged out might indicate your login shell is b0rked. Check your SSHd logs.
My computer's ip is 192.168.2.20, and my tablets is 192.168.2.2 - does that mean they are on the same subnet? (I'm a complete beginner...)
I tried checking the log files on my computer for CopSSH, but they seemed empty (specifically the "sshd-stderr.log" and "sshd-stdout.log" files) - what do you mean by "your login shell is b0rked."?
allnameswereout
2009-10-02, 02:59
As for your first question: If we assume your netmask is 255.255.255.0, yes. Some routers have option to still not allow traffic between WLAN and LAN.
As for your second question, short story: try adding -N flag to your SSH command and see what happens.
And the long story: What I meant with that b0rked statement is that, in that case you posted ssh client log, routing and portforwarding works, you are able to send and receive TCP packets to OpenSSH server port 2222. The SSH protocols match, the authentication succeeds... so you get far further than when it is stuck on no route to host.
..but then it immediately logs out. If it executed your port forwarding it'd stay connected until you quit it (or networking problem), and to kill the tunnel you'd use ^C (Ctrl+C). Instead, you get debug1: Exit status 1 (different than 0; 0 means no error), in this case usually problem is 1) login shell doesn't exist 2) or is set to /bin/false (or something similar). Check the OpenSSH's /etc/passwd and see if it is correct set. The -N flag will not execute the remote command and is recommended in situations like these.
@ Jay that reminds me, if you don't want to use OpenSSH to remotely log in to your computer to get a shell but do wish to use only port forwarding (ie. only want to use OpenSSH to run VNC server) you can harden OpenSSH server further. Worth it to discuss or not...?
allnameswereout
2009-10-02, 03:19
Uhhhhh..... :confused:
I'm not really sure what you mean.My reference was OpenSSH server on Windows. Not Nokia N8x0/N900.
If user only wants to run OpenSSH server on Windows computer to port forward VNC over, other features like allowing a remote shell are unnecessary. So you can instead of /bin/bash give a shell like /bin/true and use -N flag in ssh command. This way, someone who sees you typing your password cannot remotely log in to your Windows computer over SSH.
SSH keys might also be interesting.
Not sure if SSHFS requires a shell though.
As for your first question: If we assume your netmask is 255.255.255.0, yes. Some routers have option to still not allow traffic between WLAN and LAN.
As for your second question, short story: try adding -N flag to your SSH command and see what happens.
And the long story: What I meant with that b0rked statement is that, in that case you posted ssh client log, routing and portforwarding works, you are able to send and receive TCP packets to OpenSSH server port 2222. The SSH protocols match, the authentication succeeds... so you get far further than when it is stuck on no route to host.
..but then it immediately logs out. If it executed your port forwarding it'd stay connected until you quit it (or networking problem), and to kill the tunnel you'd use ^C (Ctrl+C). Instead, you get debug1: Exit status 1 (different than 0; 0 means no error), in this case usually problem is 1) login shell doesn't exist 2) or is set to /bin/false (or something similar). Check the OpenSSH's /etc/passwd and see if it is correct set. The -N flag will not execute the remote command and is recommended in situations like these.
@ Jay that reminds me, if you don't want to use OpenSSH to remotely log in to your computer to get a shell but do wish to use only port forwarding (ie. only want to use OpenSSH to run VNC server) you can harden OpenSSH server further. Worth it to discuss or not...?
@allnameswereout
I have found the "passwd" file on my laptop, but how do I set it correctly, "/bin/true" ?
And there is no "openssh" folder or "passwd" folder in the /etc on my N810 (although it does have an "openvpn" folder, a program which I've been trying to delete for some time..http://talk.maemo.org/showthread.php?p=340063#post340063 )
I tried adding the "-N" at the end of the command, but I've gotten a different response this time - it says "connecting to host..." and the "connection timed out" Now, even if I remove the -N command, I get the same response.
As a side note, I tried using the bash shell on my laptop that comes with Copssh, and tried to ssh to a work computer, but it told me:
$ ssh mauricio@[known ip-address]
ssh: connect to host [known ip-address] port 2222: Connection timed out
This "[known ip-address]" is one that I connect to regularly using PuTTY (which I also have installed on my laptop) and it gives me no problems. I'm not sure if this is relevant, of course.
Thanks!
PS: I found a "last log" text file and a "wtmp" text file. The former was mostly blank, except for a few *random* characters and my IP address, and the second had many more random characters along with my username and my IP addresss floating around.
As a side note, I tried using the bash shell on my laptop that comes with Copssh, and tried to ssh to a work computer, but it told me:
$ ssh mauricio@[known ip-address]
ssh: connect to host [known ip-address] port 2222: Connection timed out
This "[known ip-address]" is one that I connect to regularly using PuTTY (which I also have installed on my laptop) and it gives me no problems. I'm not sure if this is relevant, of course.
Try:
ssh mauricio@[known ip-address] -p 22
That will set the SSH port to the standard 22 rather than the non-standard 2222. That's probably what's going wrong there.
Thanks qole, that does allow me to ssh our from my laptop successfully! Could this be related to my inability to ssh into my laptop from my N180?
allnameswereout
2009-10-30, 18:42
Thanks qole, that does allow me to ssh our from my laptop successfully! Could this be related to my inability to ssh into my laptop from my N180?N810.
For some reason your ssh client picks default port 2222 this is defined in either ~/.ssh/config or /etc/ssh/ssh_config
I'm not sure I understand tunnelling very well but do I NEED to forward port 5900? The reason I ask is that I want to VNC to a machine where I'm not the admin of the firewall it's behind.
This firewall only lets me connect to the machine through one port, say port 1234, I can ssh to this machine through this port but how can I also use VNC? Is it possible?
I'm not sure I understand tunnelling very well but do I NEED to forward port 5900? The reason I ask is that I want to VNC to a machine where I'm not the admin of the firewall it's behind.
This firewall only lets me connect to the machine through one port, say port 1234, I can ssh to this machine through this port but how can I also use VNC? Is it possible?
If you're using it over an ssh tunnel, then there's no need to forward port 5900 on the firewall. The instructions on the first page of this thread (ignoring the part about forwarding port 5900), or the ones I gave in this thread (http://talk.maemo.org/showthread.php?t=42940), should provide all the details you need to set up the tunnelling.
vBulletin® v3.8.8, Copyright ©2000-2025, vBulletin Solutions, Inc.