too many authentication errors

Joe Baker joebaker "at" dcresearch.com
Mon Apr 23 20:10:03 2007


joel "at" exc.com wrote:
> I've been using VNC happily for for many years now, with a Xvnc server
> (Xvnc version 3.3.3r2+tight1.1p9) and a variety of clients, most
> recently RealVNC 4.1.2
>
> Last week, I found I could no longer connect, because of "too many
> authentication errors."  It seems that someone has been trying, so far
> unsuccessfully, to break into my Xvnc server.
>
>   
You didn't mention where these login attempts are coming from.
Usually, I never put a VNC port on the Internet, so I don't see this
problem very often.   I usually require a user to authenticate to VPN or
SSH before they have access to VNCServer.
I would think that that most people would also keep VNC servers
protected from raw Internet traffic.  However blended threats of worms
begin to make their way into corporate networks makes this point one
worth considering.  It would be nice to have the vncserver be able to
deny further login attempts only from the offending IP.  Is this the
behavior in newer implementations of RealVNC?

Thanks!
-Joe Baker


Maybe the vncserver