Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Secure VNC over the Internet

  1. #1
    Join Date
    Jun 2009
    Location
    London, UK.
    Posts
    95

    Default Secure VNC over the Internet

    Hi All,

    I want to set up a secure VNC between my system and a system with XP Home over the Internet. One system is in the UK, the other in Australia, if it makes any difference.

    I'm completely new to this and was thinking along the lines of OpenVPN and TightVNC. Do you think this is a secure way to go, or is there a more secure method? Security is the priority here, although I do want to be able to see/use my desktop GUI.

    Both ends have a combined modem/router/firewall devices to connect to the Internet, but neither end has a VPN capable router, one has openSUSE and the other Win XP Home.

    Also, I have dual monitors but the XP system has only one. Can I feed the display of each monitor to separate windows on the XP system?

    If someone could direct me to the best technologies to research, it would be much appreciated.
    -----------------------------------------------------------------------------------------
    OpenSUSE 12.1 64-bit, Gnome 3.4.1, Kernel Linux 3.1.10-1.9-desktop

  2. #2
    Join Date
    Jun 2008
    Location
    Netherlands
    Posts
    29,721

    Default Re: Secure VNC over the Internet

    Only partly answer. VNC is not secure, but you can tunnel it through SSH.
    Using VNC with SSH
    Henk van Velden

  3. #3
    Join Date
    Jun 2009
    Location
    London, UK.
    Posts
    95

    Default Re: Secure VNC over the Internet

    Hi hcvv,

    Thanks for the link. I thought about SSH but I don't know if there's much open source software available to set up SSH on XP Home. At the moment I'm looking at TightVNC paired with either OpenVPN or Hamachi to allow for a secure connection.
    -----------------------------------------------------------------------------------------
    OpenSUSE 12.1 64-bit, Gnome 3.4.1, Kernel Linux 3.1.10-1.9-desktop

  4. #4

    Default Re: Secure VNC over the Internet

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    OpenVPN is great and that will definitely work. SSH on windows is
    trickier because microsoft can't seem to ship a server but still possible
    with something like Cygwin which is free. OpenSSH also has a server you
    can install directly on windows but I've heard it's easier with openssh
    (no experience either way to say conclusively, though).

    Good luck.





    david71 wrote:
    > Hi hcvv,
    >
    > Thanks for the link. I thought about SSH but I don't know if there's
    > much open source software available to set up SSH on XP Home. At the
    > moment I'm looking at TightVNC paired with either OpenVPN or Hamachi to
    > allow for a secure connection.
    >
    >

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2.0.9 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

    iQIcBAEBAgAGBQJKcIHzAAoJEF+XTK08PnB5TZQP/05zLarw+agaIIUrLytyNoAy
    jOEGO8umrgMv4aIZRguK82UIJlMefmEZDu3XbuQi17Es4GkuITaTv/kgjEMNvYI0
    IhFcKKNl7+9CHymmxRpMorJphMUKfGKT5UOvJDgdbyInz8u9uylMlFrOX9j1iL91
    l2Ddwy/Y24G8PybTZ6Cb+6UkmhbUG6VyleX6LDga0TOKcp1mSE4DDlADz6+L5+iU
    GB29ZPg20KasVTSZiDcPjxGC2/knPrsdZwJ2ie5Il0+yyLXJNlzoFhSay2kYRu0M
    8Z66eToxGmPgPqKWONaTGvWGioOHTauaYRdIf4K0bD/ZcVrdWLn3ky9L8XpvGSCW
    Kc1yA5F5wUBdizd8Ql1K9nc+5vSsfepVeUjzdQZ19cATT1keS3sYokkgwYAw06V/
    pshB77FmKzJeLb3Au1Fp+zBdlYcD7FvPOi5vDbllSZp0zjqvs58rKb+kKumKDEFi
    5+3zgrHJlAIcdVqETyuwVMC9m91RkTzQUAgb5QlzNo8/HtE52DwRUdqxj52RxKMB
    dLFajBCRFzLTkRFVXP0rZp3vZ026Wlz7Kiu5Y86iUO/0i9oVY3UPtSHZINjl2ymz
    S9A3rgpfz3c2QFhl9fs9FBNPWat1LoEp5vKNThG4ZZePZiybgzWLJi2eYiGt4SX9
    QRKAVqoedZtX94XK7abn
    =/6vJ
    -----END PGP SIGNATURE-----

  5. #5
    Join Date
    Jun 2009
    Location
    London, UK.
    Posts
    95

    Default Re: Secure VNC over the Internet

    Thanks ab,

    I've decided to use OpenVPN and TightVNC. Now I've just got to read heaps to try and work out both what I need and where to start setting it up for both ends.

    My biggest problem is the ~17000km between the computers and no one to setup and test the connection before I fly out next week, so I have to make my best guess for the setup at this end then setup the other end when I get there and hope.
    -----------------------------------------------------------------------------------------
    OpenSUSE 12.1 64-bit, Gnome 3.4.1, Kernel Linux 3.1.10-1.9-desktop

  6. #6

    Default Re: Secure VNC over the Internet

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    OpenVPN is pretty easy to setup if you follow the docs from the OpenVPN
    folks. Use tun (vs. tap) unless you have a really good reason to do
    otherwise and both sides are a cinch. It helps if you understand Public
    Key stuff for the key side of things but not required with the steps
    included. The biggest issue I've had setting that up has to do with the
    client side and current windows stuff, and it all appears to be
    UAC-related, though having issues with that shouldn't surprise anybody who
    has been alive in the last three years so just don't use vista of win7 and
    you'll be fine on that. I think this is the page I used last time:

    http://openvpn.net/index.php/open-so...ion/howto.html

    Good luck.





    david71 wrote:
    > Thanks ab,
    >
    > I've decided to use OpenVPN and TightVNC. Now I've just got to read
    > heaps to try and work out both what I need and where to start setting it
    > up for both ends.
    >
    > My biggest problem is the ~17000km between the computers and no one to
    > setup and test the connection before I fly out next week, so I have to
    > make my best guess for the setup at this end then setup the other end
    > when I get there and hope.
    >
    >

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2.0.9 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

    iQIcBAEBAgAGBQJKcdDIAAoJEF+XTK08PnB5Fl4P/i2v76rYLPbBD9eFw/oFcgm6
    pxGdjhJt+3mgna07Tf+1tl5HiePgMe6e9OZJfnbqMWJNU5Iul63EXwIPpzseXFJ/
    fXT5izw/qlKTzS/IWALUOgoAXqRqcQ3GSqCMkt11OEO4oxCrMcDNFaSjqkUg5Tre
    SM54Dpy6dzCSFyLPz7jSzoRnoKRRknZaB1NGqA/NpMIT3J7UhQW30ZI6duqXaaI0
    B9lNhOmlSBa/XvCHd3N7lbfRtRNaxkOEY7u18HRhegZWi/W2hQlekvKW1ZCYIQg3
    z6H4u5zqA3LG+Kblxf4ZoKF1f/TAmEzH4u4BhIrvJxM0zZaWGzConDzghlK4O73H
    MnnT2uTz3zByb2TA2Vh5aABhIQhZ1zEMQ8owxPufuQ6jbyMTUzdoJId4L5zbPKg5
    S3DI3nLCvd5I1/voMEHeTBEFNWPuJxAGhXuA3vihYZY5/gp9rS8QE48RHlJPyyq/
    voafjcH70VcgIxkpRUEXA7l++D6TDXGsZN3Mhq3lbU+Z1pUnktl0a/LZ5yTQlzJ5
    WzSnVcXlGWv7ctdERsg+QcW4NH3OPaTkmIJ2+14yrZw5Aykx945Ed1mz5TPze94j
    8KaeshGwRUUTZ6wewNnJgv1/ZqlF5Xl58XhCKCYUwX54O+80tGnSM+ffA/avTPza
    pcsw3l25Lx8bYLWO3X/l
    =PwL2
    -----END PGP SIGNATURE-----

  7. #7
    Join Date
    Sep 2008
    Location
    Toronto,Canada
    Posts
    549

    Default Re: Secure VNC over the Internet

    NX Client/Server is another option which is secure as it is used over ssh. I'm using it and find it really easy to use/configure.
    you can read at NoMachine NX - Desktop Virtualization and Remote Access Management Software
    If you interested ask and I can help you with setup.

  8. #8
    Join Date
    Jun 2009
    Location
    London, UK.
    Posts
    95

    Default Re: Secure VNC over the Internet

    dmera, thanks for the info. I had a look and it looks interesting, but since my original post I've decided it might be a good idea to set up the Windows computer with a VNC server too. It's my mum's computer and it would be handy to be able to control it remotely when she needs help from time to time.
    As far as I can see, NoMachine NX doesn't have a Windows server at this time.

    Anyway thanks again for the info, it's always good to know of the alternatives available.
    -----------------------------------------------------------------------------------------
    OpenSUSE 12.1 64-bit, Gnome 3.4.1, Kernel Linux 3.1.10-1.9-desktop

  9. #9

    Default Re: Secure VNC over the Internet

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    If you do go with the VPN option you could, with windows, use the native
    RDP protocol as well which would probably be faster and would not require
    a server on that side. Also I believe RDP is encrypted natively (not that
    it matters when you access it over a VPN). Either way you could have her
    double-click on the 'Help' icon you create (which launches OpenVPN's
    client which connects to your network) and then access her box using
    Linux's native RDP client. Tada... all is well.

    Good luck.





    david71 wrote:
    > dmera, thanks for the info. I had a look and it looks interesting, but
    > since my original post I've decided it might be a good idea to set up
    > the Windows computer with a VNC server too. It's my mum's computer and
    > it would be handy to be able to control it remotely when she needs help
    > from time to time.
    > As far as I can see, NoMachine NX doesn't have a Windows server at this
    > time.
    >
    > Anyway thanks again for the info, it's always good to know of the
    > alternatives available.
    >
    >

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2.0.9 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

    iQIcBAEBAgAGBQJKcvlZAAoJEF+XTK08PnB5JooP/R2O/LqtAOB2TEKmhhMDfG7i
    fpnRHGTLQzDXasH92MO0z6BA+AIMT4KGCX/ES1UDRO9ZQTLFP9EzJUugC0Pgp8d2
    OUdDb8g8XHql3QiLlKFcZzxl8irhd6S+ZhgQgQ1OWnObdGrBz4pxOphTDF0Ed1jx
    fZ4ubnvFNKOsv3TNTDvPtTDirxeHQM5aOd/zH3ZF978gdJX2OKpwUB+b68yPKLL+
    q018sci1vZy6NNg581qsubC3H8dlDYbgBi/vk+VhkjRYOxb7dkW+vyK7s4N0MxPQ
    3Jq1/EJPEDLOKe6ep29+zDAmhw0lVtY6pD08VustLKxyLBBHdMkghkHzDOZRGF9R
    DyHpLOGsVCxXIT5Hbnd0iY0Obx21J/H0Dc+5g2+WSOGkWWdCO1BVfn6J33+4prq9
    c6kHd8y3xTpLHER2IgARBSsdaWblsjxnlKTEy5G0z22U3nlksj+qOP7gVJ1kOqd9
    oZGjp2KD30LdYwHwx5h75kaWoirmb9jtP8qX3sIxS9Fj4mqnn1hwtbQdGcBo4omZ
    qNhuGoRUl34C8X1tOvhewkwwwSZ6TQ4EEbPMwRVLvQ2Ux2A6h7DRdyUVwS32xaJA
    nn4ReQ+5AVpmtJL0JxPFTw/XAVRzCOI8bq7xU15k4aqc6EO81gAt+slTpMw7YDNn
    LbYhsayLNnqTGsXzGHn9
    =CWdA
    -----END PGP SIGNATURE-----

  10. #10
    Join Date
    Jun 2009
    Location
    London, UK.
    Posts
    95

    Default Re: Secure VNC over the Internet

    Quote Originally Posted by ab@novell.com View Post
    If you do go with the VPN option you could, with windows, use the native
    RDP protocol as well which would probably be faster and would not require
    a server on that side.
    AFAIK the problem is XP Home edition doesn't have Remote Desktop like XP Professional does. It has Remote Assistance, which uses the RDP protocol, but the user must send a time limited invitation which the other person uses to connect with another Windows PC. I'm pretty sure you have to use a third party VNC program. That's why I am looking at TightVNC with OpenVPN.

    I currently use tsclient/rdesktop to control a headless server with XP Professional at home, but it has Remote Desktop included and I don't have to worry about VPN or SSH as it's on my local network.
    -----------------------------------------------------------------------------------------
    OpenSUSE 12.1 64-bit, Gnome 3.4.1, Kernel Linux 3.1.10-1.9-desktop

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •