Full Disclosure mailing list archives

Re: Some VNC doubts : access server behind TCP/IP proxy or gateways


From: Ill will <xillwillx () gmail com>
Date: Tue, 5 Jul 2005 01:41:44 -0400

tcpredir,fpipe,bouncer

On 7/5/05, Aditya Deshmukh <aditya.deshmukh () online gateway strangled net> 
wrote:

Hi List,

I have a very peculiar problem about accessing VNC server behind gateways
and proxy server...

Here is the background info...

I have a client who has pretty big vnc installation base mostly windows 
but
Linux and Solaris also includes.

Most of the Road Warriors have windows with vnc and ssh installed on them 
(
mostly winxp sp2 )

VNC is used to remote admin or support for some of the road warriors. But
most of the times when the VNC server is behind a gateway like this it 
wont
connect.

[ Internet ] -- [ Gateway ] --- [ Lan ]

The work about is to use the UltraVNC relay service, but if you don't have
any control over the gateway this becomes impossible to operate. And I 
hate
to open ports in the firewalls of the road warriors' computers.

Is there a way something like reverse shell that allows someone to connect
to a VNC server, behind gateway and through firewalls without opening any
holes in it or a tcp/ip proxy that is proxy that does not allow 
connections
from the internet ?

Basically, The user initiates the connection and the helpdesk can use the
same socket to the laptop for connection over VNC ( vnc encryption and
compression have already been taken care of, and only one socket is needed
for all this- for a firewall I would require only one hole )


Any help would be appreciated - aditya





________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com<http://www.mailtraq.com>
)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




-- 
- illwill
http://illmob.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: