Thread: VNC not tunnelling over SSH correctly Ubuntu 9.1

i started thread on (http://ubuntuforums.org/showthread.p...10#post8787010), topic not specific know problem be. ive started more appropriately titled thread.

in summary :

in local network ssh (via putty) ubuntu 9.1 server , tunnel vnc connection through it. no problems @ all. forward port 5900 through ssh this. local servers have port 5900 blocked, know tunnelling correctly without trying access port 5900. cannot vnc directly port 5900, expect. works expected.

when ssh external router use virtual server connection through port 22. works fine.

start vnc session, in exact same way localy, tunnelled through port 5900. tunnel port 5900 my.router.public.ip port 5900.

when start vnc times out. reason firewall blocks request routers public ip address port 5900 on server running ssh follows :

feb 08 08:20:18 home.gateway:firewall:info: 525284.488 blocked prot=6, 192.168.1.3:57217 > 123.243.**.**:5900, s seq=1821339514, ack=0 -default defense

difference here request coming externally router, specifying public ip , forwarded port of 22 ssh.

first thought why ssh trying access public ip on port 5900 ? wouldnt imply not working correctly ? can explain why doing ?

, per other thread , suggestions there, have tried both ubuntu built in desktop , x11vnc. both give identical results.

when start x11vnc tell listen on port 5900. this, explained above, wokrs fine in internal network , not put out requests on port 5900.

have thoughts ?

i start vnc session, in exact same way localy, tunnelled through port 5900. tunnel port 5900 my.router.public.ip port 5900.

i don't think want this. ssh has gotten inside firewall port redirection my.router.public.ip not correct. doing making port redir go "back out" through router! believe firewall log pasted shows packet originated inside firewall.

i'm pretty sure want tunnel port 5900 localhost:5900 normal situation done time vnc. (i assume x11vnc running on same machine log ssh, if not ask additional details).

so, e.g. on unix cmdline, ssh command this:

code:

external-box>  ssh -l 5900:localhost:5900  username@my.router.public.ip

"external-box> " mean shell prompt on machine external firewall.

if not using cmdline run ssh, e.g. putty on windows, replace "my.router.public.ip port 5900" "localhost port 5900" (or whatever format is; don't use putty)

using localhost:5900 work inside lan too. can test way if want before making connection outside.

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [SOLVED] VNC not tunnelling over SSH correctly Ubuntu 9.1

Ubuntu