through ssh with listen mode - how on Linux ??
Uwe Dippel
udippel@yahoo.com
Tue Apr 15 05:18:00 2003
--- Wayne Throop <throopw@sheol.org> wrote:
> So it's simple. On ws-at-work you (eg)
>
> ssh -2 -N -R 5901:localhost:5901 ws-at-home
>
> which will establish a reverse port redirection.
> Note: as somebody else already mentioned, this is a security risk
> to your corporate firewall, so you will want to be very careful,
> ensure your home system is secure enough to satisfy your
> corporate ip security folks.
>
> Now, on ws-at-home you simply run vncviewer, and choose localhost:1
> as the place you want to connect to. It's just that simple.
It is. Check and thanks!
> You could also make the redirection be -L 5501:localhost:5501 to do
> the
> port forward to ws-at-home. In that case, you'd need to start the
> viewer at home with -listen 1, and use vncconnect at work something
> like
> so: vncconnect -display :1 localhost:1. This would be less of a
> security risk, slightly, since everything is innitiated outgoing, and
> it'd be harder for somebody to force access to your corporate net
> because they have to already be on ws-at-work to run vncconnect at
> session startup.
This is convincing. Only, I don't get any display. Maybe somthing wrong
to be pointed out easily?
1. I start vncviewer -listen 1 on ws_at_home.
It tells me it's listening on port 5501
2. I start vncserver on ws_at_work.
It tells me "New 'X' desktop is ws_at_work:1
3. I start the link on ws_at_work with
ssh -2 -N -L 5501:localhost:5501 ws_at_home.
It asks for password and accepts (though no confirmation, just nothing.
But if I give the wrong one, it complains. Seems to be okay.)
4. I connect on ws_at_work using vncconnect -display :1 localhost:1
It returns the prompt on the next line and fails to connect (without an
error message on either side; simply no changes).
Yes, everything under root.
Thanks for any hint,
Uwe
__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com