Secure VNC over the Internet

Hi All,

I want to set up a secure VNC between my system and a system with XP Home over the Internet. One system is in the UK, the other in Australia, if it makes any difference.

I’m completely new to this and was thinking along the lines of OpenVPN and TightVNC. Do you think this is a secure way to go, or is there a more secure method? Security is the priority here, although I do want to be able to see/use my desktop GUI.

Both ends have a combined modem/router/firewall devices to connect to the Internet, but neither end has a VPN capable router, one has openSUSE and the other Win XP Home.

Also, I have dual monitors but the XP system has only one. Can I feed the display of each monitor to separate windows on the XP system?

If someone could direct me to the best technologies to research, it would be much appreciated.

Only partly answer. VNC is not secure, but you can tunnel it through SSH.
Using VNC with SSH

Hi hcvv,

Thanks for the link. I thought about SSH but I don’t know if there’s much open source software available to set up SSH on XP Home. At the moment I’m looking at TightVNC paired with either OpenVPN or Hamachi to allow for a secure connection.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenVPN is great and that will definitely work. SSH on windows is
trickier because microsoft can’t seem to ship a server but still possible
with something like Cygwin which is free. OpenSSH also has a server you
can install directly on windows but I’ve heard it’s easier with openssh
(no experience either way to say conclusively, though).

Good luck.

david71 wrote:
> Hi hcvv,
>
> Thanks for the link. I thought about SSH but I don’t know if there’s
> much open source software available to set up SSH on XP Home. At the
> moment I’m looking at TightVNC paired with either OpenVPN or Hamachi to
> allow for a secure connection.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=/6vJ
-----END PGP SIGNATURE-----

Thanks ab,

I’ve decided to use OpenVPN and TightVNC. Now I’ve just got to read heaps to try and work out both what I need and where to start setting it up for both ends.

My biggest problem is the ~17000km between the computers and no one to setup and test the connection before I fly out next week, so I have to make my best guess for the setup at this end then setup the other end when I get there and hope. lol!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenVPN is pretty easy to setup if you follow the docs from the OpenVPN
folks. Use tun (vs. tap) unless you have a really good reason to do
otherwise and both sides are a cinch. It helps if you understand Public
Key stuff for the key side of things but not required with the steps
included. The biggest issue I’ve had setting that up has to do with the
client side and current windows stuff, and it all appears to be
UAC-related, though having issues with that shouldn’t surprise anybody who
has been alive in the last three years so just don’t use vista of win7 and
you’ll be fine on that. I think this is the page I used last time:

http://openvpn.net/index.php/open-source/documentation/howto.html

Good luck.

david71 wrote:
> Thanks ab,
>
> I’ve decided to use OpenVPN and TightVNC. Now I’ve just got to read
> heaps to try and work out both what I need and where to start setting it
> up for both ends.
>
> My biggest problem is the ~17000km between the computers and no one to
> setup and test the connection before I fly out next week, so I have to
> make my best guess for the setup at this end then setup the other end
> when I get there and hope. lol!
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=PwL2
-----END PGP SIGNATURE-----

NX Client/Server is another option which is secure as it is used over ssh. I’m using it and find it really easy to use/configure.
you can read at NoMachine NX - Desktop Virtualization and Remote Access Management Software
If you interested ask and I can help you with setup.

dmera, thanks for the info. I had a look and it looks interesting, but since my original post I’ve decided it might be a good idea to set up the Windows computer with a VNC server too. It’s my mum’s computer and it would be handy to be able to control it remotely when she needs help from time to time.
As far as I can see, NoMachine NX doesn’t have a Windows server at this time.

Anyway thanks again for the info, it’s always good to know of the alternatives available.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you do go with the VPN option you could, with windows, use the native
RDP protocol as well which would probably be faster and would not require
a server on that side. Also I believe RDP is encrypted natively (not that
it matters when you access it over a VPN). Either way you could have her
double-click on the ‘Help’ icon you create (which launches OpenVPN’s
client which connects to your network) and then access her box using
Linux’s native RDP client. Tada… all is well.

Good luck.

david71 wrote:
> dmera, thanks for the info. I had a look and it looks interesting, but
> since my original post I’ve decided it might be a good idea to set up
> the Windows computer with a VNC server too. It’s my mum’s computer and
> it would be handy to be able to control it remotely when she needs help
> from time to time.
> As far as I can see, NoMachine NX doesn’t have a Windows server at this
> time.
>
> Anyway thanks again for the info, it’s always good to know of the
> alternatives available.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=CWdA
-----END PGP SIGNATURE-----

AFAIK the problem is XP Home edition doesn’t have Remote Desktop like XP Professional does. It has Remote Assistance, which uses the RDP protocol, but the user must send a time limited invitation which the other person uses to connect with another Windows PC. I’m pretty sure you have to use a third party VNC program. That’s why I am looking at TightVNC with OpenVPN.

I currently use tsclient/rdesktop to control a headless server with XP Professional at home, but it has Remote Desktop included and I don’t have to worry about VPN or SSH as it’s on my local network.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good point… I’ve never suffered through ‘Home’ so I couldn’t say for
sure. Thanks for the follow-up.

Good luck.

david71 wrote:
> ab@novell.com;2020111 Wrote:
>> If you do go with the VPN option you could, with windows, use the
>> native
>> RDP protocol as well which would probably be faster and would not
>> require
>> a server on that side.
>
> AFAIK the problem is XP Home edition doesn’t have Remote Desktop like
> XP Professional does. It has Remote Assistance, which uses the RDP
> protocol, but the user must send a time limited invitation which the
> other person uses to connect with another Windows PC. I’m pretty sure
> you have to use a third party VNC program. That’s why I am looking at
> TightVNC with OpenVPN.
>
> I currently use tsclient/rdesktop to control a headless server with XP
> Professional at home, but it has Remote Desktop included and I don’t
> have to worry about VPN or SSH as it’s on my local network.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=zMQI
-----END PGP SIGNATURE-----

The folks here said to use “putty” under windows, and claim you can SSH to a linux box easily and use UltraVNC to get KDE. I have yet to get it going. The OpenVNC sounds good until I start going through the docs and it’s really confusing since I’m a networking newbie.