[linux] vnc cez firewall

[UVT - Martin Las]

> 
> Ahoj.
> 
> Mam v jednej vzdialenej firme ako file server WinNT 4.0 a ako branu do 
> internetu mam Linux. Toho NT sa bohuzial nezbavim, aspon zatial. Potrebujem 
> obcas urobit nejaku malu zmenu na WinNT, napriklad pridat uzivatela, zmenit 
> prava ... Je mozne aby na WinNT bezal VNC a tak bol pristupny aj mne mimo 
> firmy? WinNT nema realnu IP adresu, je za firewallom.
> Ak ano ako je to z bezpecnostou?
Ahoj,
snaz sa vyhnut portforwarding, nie je to stastne riesenie. 
Asi mas na linux ssh_cko. Vie to tunneling, pouzi to a zaroven
budes mat kryptovane spojenie. Pristup na ssh si osetri v
tcp_wrapper/xinetd/sshd_config prip. fw pravidlami.

Ak chces ozaj portforwarding, daj si tam iptables a pouzi 
iptables -A PREROUTING -t nat -p tcp ... -j DNAT --to host:port  tam,
stateful pravidlo spat.

Neviem, co mate vo vasej firme, pokial linux a tok dat nebude velky,
skus IPsec - www.freeswan.org .

Ak ta trapi kapacita linky, skus http://freshmeat.net/projects/tightvnc/ .
About: TightVNC optimizes VNC for operation on slow network links. Its
improvements include bandwidth-friendly Tight encoding, optional JPEG
compression, local cursor support on the client side, automatic SSH
tunneling in the Unix vncviewer, and more. The modified servers and viewers
are fully compatible with the original VNC software. 


Martin Las~
> 
> Karol
> 
> 
> 
> _______________________________________________
> http://lists.linux.sk/listinfo/linux
> http://search.lists.linux.sk
>