On Mon, 19 Jul 2010, Rob Withers wrote:

>
>
> --------------------------------------------------
> From: "Levente Uzonyi" <leves at elte.hu>
> Sent: Sunday, July 18, 2010 7:22 PM
> To: "The general-purpose Squeak developers list" 
> <squeak-dev at lists.squeakfoundation.org>
> Subject: Re: [squeak-dev] Headless Linux squeak running max cpu
>
>> On Sun, 18 Jul 2010, Rob Withers wrote:
>> 
>>> Ok, I am setting up.  Why disable "allow remote connections"?  I will run
>>> this on a linux server and use RealVNC from my home machine.  Won't that
>>> represent a remote connection to squeak's server?
>> 
>> The communication between the client and the server is not encrypted. So
>> you'll want to tunnel your tcp connection through ssh to encrypt it.
>> Therefore you don't need remote connections, because sshd will connect
>> from localhost.
>> The best is to filter out all incoming packets to the rfb's tcp port from
>> interfaces other than localhost with iptables or whatever you use.
>> 
>
> --------------------------------------------------
> From: "C. David Shaffer" <cdshaffer at acm.org>
> Sent: Sunday, July 18, 2010 7:24 PM
> To: "The general-purpose Squeak developers list" 
> <squeak-dev at lists.squeakfoundation.org>
> Subject: Re: [squeak-dev] Headless Linux squeak running max cpu
>
>> On 07/18/10 18:40, Rob Withers wrote:
>>> Ok, I am setting up.  Why disable "allow remote connections"?  I will
>>> run this on a linux server and use RealVNC from my home machine.
>>> Won't that represent a remote connection to squeak's server?
>>> 
>>> Thanks,
>>> Rob
>>> 
>> IMHO it is best to ssh tunnel your VNC session.  tightvnc has -via and
>> -tunnel options to help or you can set the tunnel up manually with ssh
>> by tunneling local port 59?? to remote 59?? where ?? is the VNC display
>> number.  This may be why he's recommending disallowing remote connections.
>> 
>
> David and Levente,
>
> How do I use -via or -tunnel with tightvnc?  I don't see those options.  I am 
> using the UI interface to launch the tool.   I can connect to my server, 
> enter my password, but then it says "Error while waiting for server message". 
> This is not using ssh, or tunnel, or via.

I don't use tightvnc, so I don't know. As I mentioned, Squeak's RFB is a 
bit picky about parameters, so if you want to use tightvnc (I don't think 
it's better than realvnc) you have to find the options that work with 
Squeak.

About the tunneling: I don't use tightvnc, so I don't know how -via or 
-tunnel works. This is how I tunnel my connections (on unix):
Let's say Squeak is running on host.com and it's RFB is listening on 
5901 (display 1). On my pc I do:
ssh -p <sshserverport> -L 5901:127.0.0.1:5901 user at host.com
Then connect with my vnc client on my pc to 127.0.0.1:5901.

If you just want to create a tunnel you can add the -N switch to ssh. If 
you're using public key authentication without a passphrase you may also 
find the -f switch useful.


Levente

>
> Thanks,
> Rob 
>
>