Thanks!!

2006/12/11, Gonzalo gonzalomr@gmail.com:

hi try with this... http://www.redhat.com/magazine/006apr05/features/vnc/ http://www.linuxforums.org/forum/linux-tutorials-howtos-reference-material/9...

On 12/11/06, Departamento de Informatica deptoinf@gmail.com wrote:

...

Hi, do you have a guide to configure a VNC Server in Centos, I've read a guide that says

"Enable VNC as an xinetd service"

and i'm not sure if this is good , talkin about security,

Thank you _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

-- Gonzalo M. Rios Registered User LINUX #237889 _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Thanks, I've configured the vnc server, on port 5901, lamentably i only have acces from localhost, with nmap the port 5901 appears like "filtered", just need to changue some thing on Iptables configuration, because i did

iptables -A INPUT -p TCP -i eth1 -s 10.20.30.0/24 --dport 5901 -j ACCEPT

and still have no access from my network

2006/12/11, Rex Dieter rdieter@math.unl.edu:

Departamento de Informatica wrote:

...

Hi, do you have a guide to configure a VNC Server in Centos, I've read a guide that says

"Enable VNC as an xinetd service"

Take a look at the vnc-ltsp-config rpm in Fedora Extras. It (basically) does most of the work, short of enabling XDMCP for your DISPLAYMANAGER.

-- Rex

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

On Tue, 2006-12-12 at 08:26 -0300, Departamento de Informatica wrote:

Thanks, I've configured the vnc server, on port 5901, lamentably i only have acces from localhost, with nmap the port 5901 appears like "filtered", just need to changue some thing on Iptables configuration, because i did

iptables -A INPUT -p TCP -i eth1 -s 10.20.30.0/24 --dport 5901 -j ACCEPT

and still have no access from my network

ALSO ... being quite obvious ... if you have an "all reject" in the chain, you need to do iptables -L and make sure the new rule is above the reject all rule ... or the packet will never make it that far.

If you have a script to restart the firewall, add it there instead (above the reject line).

also, I don't use CAPS for my -p or my -m switches ... no idea if that matters or not :P

And if all this seems trivial to you, slap me and I will stop with all the easy/obvious stuff :)

Thank you all, the truth is i'm newbie in linux, and the Iptables rules it'son /etc/rc.d/rc.local (Copy Paste from another server, configured by another people with more knowledge of linux, ) :), so i'm adding rules to the bottom of that file, maybe one rule above is blocking the 5901 port, i dont know why the "more linux knowledge people" didn't put the rules in /etc/sysconfig/iptables, so i will check the logs

Thanks Again

2006/12/12, Lamar Owen lowen@pari.edu:

On Tuesday 12 December 2006 06:26, Departamento de Informatica wrote:

...

Thanks, I've configured the vnc server, on port 5901, lamentably i only have acces from localhost, with nmap the port 5901 appears like "filtered", just need to changue some thing on Iptables configuration, because i did

iptables -A INPUT -p TCP -i eth1 -s 10.20.30.0/24 --dport 5901 -j ACCEPT

For the default installation with iptables enabled, all the rules are in /etc/sysconfig/iptables; you need to edit this file with the rule you need above the reject line and with the right chain name. Once you edit this file, do a 'service iptables restart' to make it active.

If it still doesn't work, check /var/log/messages to see if SELinux is denying the socket open for listening. -- Lamar Owen Director of Information Technology Pisgah Astronomical Research Institute 1 PARI Drive Rosman, NC 28772 (828)862-5554 www.pari.edu _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos