Can't get vncviewer -via to work [SOLVED]

audiodef · Last edited by audiodef on Tue Jan 22, 2013 4:08 pm; edited 1 time in total

I've been trying to use vncviewer with -via, but anything I try results in vncviewer spitting out a list of options. I've tried:

vncviewer -via (user)@(host_ip_address):(display_num) localhost
vncviewer -via (user)@(host_ip_address) localhost
vncviewer -via (host_ip_address) localhost

and various combinations. What am I missing? Unencrypted VNC (tigervnc on the remote machine) works, and I can ssh in to my remote machine.
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.

Gusar · Posted: Sun Jan 20, 2013 9:08 pm Post subject:

If you're using tigervnc-1.2.0, there is no -via. It hasn't been implemented yet in the new fltk-based viewer. I know it's still listed in the manpage, but that's just because it's outdated. Upstream bug report: http://sourceforge.net/tracker/?func=detail&atid=1126848&aid=3588877&group_id=254363 <- status: patches welcome

audiodef · Posted: Sun Jan 20, 2013 9:10 pm Post subject:

Oh, OK. Thanks for the info.

_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.

audiodef · Posted: Sun Jan 20, 2013 9:40 pm Post subject:

If I choose to downgrade, does tigervnc need to be downgraded on both client and server machines? Because I downgraded on the client machine and I'm getting connection refused errors for -via.
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.

Gusar · Posted: Sun Jan 20, 2013 9:45 pm Post subject:

As far as I know -via is all client-side, the server shouldn't matter.

audiodef · Posted: Sun Jan 20, 2013 10:24 pm Post subject:

Ah, I forgot to add the display number to localhost. It works.

How would I configure tigervnc to not accept any connections that are not tunneled?
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.

Gusar · Posted: Sun Jan 20, 2013 10:43 pm Post subject:

There's an option for the server to listen only on localhost, "man Xvnc" is your friend.

Beyond that, just set the firewall to not let standard vnc ports through. The usual recommended firewall config is to block all inbound connections except specific (for example, ssh) ports, so if you use a config like that, you're already covered.

audiodef · Posted: Mon Jan 21, 2013 1:39 am Post subject:

Gotcha. All I had to do was put -localhost in VNC_OPTS in /etc/init.d/tigervnc.

Thanks for your help.

EDIT:

It keeps disconnecting, after which all further connections are refused unless I restart tigervnc. Another known issue?

Actually, now I'm seeing tigervnc failing to stop...
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.

Gusar · Posted: Fri Jan 25, 2013 9:46 am Post subject:

Weeeeeeee, -via has been added to tigervnc svn: http://thread.gmane.org/gmane.network.vnc.tigervnc.scm/1400

On Arch, I provide a svn PKGBUILD - https://aur.archlinux.org/packages/tigervnc-svn/ - I haven't bothered creating a live ebuild for gentoo.

audiodef · Posted: Fri Jan 25, 2013 3:32 pm Post subject: