VNC port forwarding help

[revzalot]

I've already have ssh opened at my firewall. I even port forwarded it to my workstation where I open vncviewer but I still cannot setup an ssh tunnel. What am i doing wrong with my pf firewall?



ssh -L 5900:192.168.1.212:5900 -p 38901 revzalot@69.59.169.251

[robbak]

Assuming that 192.168.1.121 is the address of the machine running the VNC server, and that server is listening on port 5900, you should be able to connect to it by pointing your VNC client at localhost:5900

If not, then tell us what you are trying, what it outputs, and what messages end up in the log files (both remote and local), and we should be able to work out what is happening.

edit: make sure that you have no restrictions on localhost in your local firewall, and nothing blocking packets between ....169.251 and ....1.212. Put temporary pass all quick from ... to ... rules in to be sure.

[revzalot]

Originally Posted by robbak

Assuming that 192.168.1.121 is the address of the machine running the VNC server, and that server is listening on port 5900, you should be able to connect to it by pointing your VNC client at localhost:5900

If not, then tell us what you are trying, what it outputs, and what messages end up in the log files (both remote and local), and we should be able to work out what is happening.

edit: make sure that you have no restrictions on localhost in your local firewall, and nothing blocking packets between ....169.251 and ....1.212. Put temporary pass all quick from ... to ... rules in to be sure.

I turned off my localhost firewall and pf is forwarding port 22 to my vnc client.

I used:
$ vncviewer localhost:4
since my vncserver is setup for display 4 but I get a cannot connect error.
I setup my vnc client to listen on port 5900

[robbak]

OK. If you are getting an ssh login, then you do not need to worry about any firewalls.

I take it that the firewall is forwarding port 38901 to the ssh server's (and vnc server's) address, port 22? Just make sure that you are making an ssh connection to the right machine!

Make sure that vncviewer is trying to connect to port 5900.

You would be better off using localhost in the ssh command, like this:
$ ssh -L 5900:localhost:5900 -p[thatnumber] user@host