Arch Linux

JohnDVD

Member

Registered: 2011-11-29

Posts: 40

VNC through Firewall

Hi,

I want an X11VNC connection through firewall (ufw) within the LAN.
I opened port 5900 (for DISPLAY :0), but I noticed that it needs additional ports that are random about 24000 to 48000 or higher.
How can I make that ports static for x11vnc?
I tought port 5900 is sufficient, but netstat -atvn (on client) says for example:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State   
tcp        0      1 192.168.2.99:42097      192.168.2.89:5900       SYN_SENT

I have to open port 42097 on the VNC Server to let the client connect. Nevertheless the port changes every try. Can one make it static?

Greetz
JD

Slithery

Administrator

From: Norfolk, UK

Registered: 2013-12-01

Posts: 5,776

Re: VNC through Firewall

I have to open port 42097 on the VNC Server to let the client connect.

No you don't.

Your netstat output shows that a connection is being made from port 42097 on the client to port 5900 on the server just as it should do.
As long as the firewall rule on your server is accepting connections from any source port to destination port 5900 then you should be up and running.

---

No, it didn't "fix" anything. It just shifted the brokeness one space to the right. - jasonwryan
Closing -- for deletion; Banning -- for muppetry. - jasonwryan

aur - dotfiles

JohnDVD

Member

Registered: 2011-11-29

Posts: 40

Re: VNC through Firewall

Thanks for that advice

graysky

Wiki Maintainer

From: :wq

Registered: 2008-12-01

Posts: 10,697

Website

Re: VNC through Firewall

I recommend you do not expose 5900 to the world.  Instead, use an ssh tunnel.  See the vnc page on the wiki.

---

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packages • Zsh and other configs

JohnDVD

Member

Registered: 2011-11-29

Posts: 40

Re: VNC through Firewall

I restrict the access to my local network at this time.

bulletmark

Member

From: Brisbane, Australia

Registered: 2013-10-22

Posts: 683

Re: VNC through Firewall

I restrict the access to my local network at this time.

But using ssh with x11vnc is the "canonical" way to do it. See the man page for x11vnc which is riddled with examples and snippets on how to use it with ssh.