Secure VNC using Zebedee
"Ryan Small" <[email protected]> Wed, 8 Oct 2003 21:05:20 -0400
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Organization | Solid Caddgroup Inc. |
| Message-ID | <004e01c38e01$699accd0$97a3acce@rsmall> |
I've successfully got TightVNC configured at my office so that the employees can access their computers from home. The office computers are behind a router which has been configured for port-forwarding. Presently there are 5 ports being forwarded at the router (1 port for each of the 5 computers in the office being remote controlled). I'm looking to make VNC more secure. I want to setup Zebedee to implement an SSH tunnel. I know that this prevents someone from "snooping" the data as it travels between the vnc client and server, but does it eliminate the need for port-forwarding? My understanding is that SSH will still require the ports to be open at the router meaning that if someone tried to initiate a connection (a worm for example or some other type of malicious code) to the router on a port being forwarded they would end up gaining access to the network so is there something else I can/should be doing to make VNC more secure besides using SSH? Additionally, I want to confirm that I have the correct setup for getting Zebedee to run in my environment: 1) Zebedee configured on each VNC server computer (in my case 5 computers). This involves running Zebedee using the supplied VNCserver.zbd file and enabling "AllowLoopback" in the registery. 2) The connection to the Zebedee/VNC server is done by running Zebedee using the supplied VNCViewer.zbd file and supplying the parameters for the router IP and port to connect to and the router (which is being forwarded to internal IP address running VNC server and Zebedee server). Is there any other configuration necessary? Thanks. Thanks for your assistance, Ryan ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php