--------------------------------------------------
From: "Levente Uzonyi" <leves at elte.hu>
Sent: Sunday, July 18, 2010 7:22 PM
To: "The general-purpose Squeak developers list" 
<squeak-dev at lists.squeakfoundation.org>
Subject: Re: [squeak-dev] Headless Linux squeak running max cpu

> On Sun, 18 Jul 2010, Rob Withers wrote:
>
>> Ok, I am setting up.  Why disable "allow remote connections"?  I will run
>> this on a linux server and use RealVNC from my home machine.  Won't that
>> represent a remote connection to squeak's server?
>
> The communication between the client and the server is not encrypted. So
> you'll want to tunnel your tcp connection through ssh to encrypt it.
> Therefore you don't need remote connections, because sshd will connect
> from localhost.
> The best is to filter out all incoming packets to the rfb's tcp port from
> interfaces other than localhost with iptables or whatever you use.
>

--------------------------------------------------
From: "C. David Shaffer" <cdshaffer at acm.org>
Sent: Sunday, July 18, 2010 7:24 PM
To: "The general-purpose Squeak developers list" 
<squeak-dev at lists.squeakfoundation.org>
Subject: Re: [squeak-dev] Headless Linux squeak running max cpu

> On 07/18/10 18:40, Rob Withers wrote:
>> Ok, I am setting up.  Why disable "allow remote connections"?  I will
>> run this on a linux server and use RealVNC from my home machine.
>> Won't that represent a remote connection to squeak's server?
>>
>> Thanks,
>> Rob
>>
> IMHO it is best to ssh tunnel your VNC session.  tightvnc has -via and
> -tunnel options to help or you can set the tunnel up manually with ssh
> by tunneling local port 59?? to remote 59?? where ?? is the VNC display
> number.  This may be why he's recommending disallowing remote connections.
>

David and Levente,

How do I use -via or -tunnel with tightvnc?  I don't see those options.  I 
am using the UI interface to launch the tool.   I can connect to my server, 
enter my password, but then it says "Error while waiting for server 
message".  This is not using ssh, or tunnel, or via.

Thanks,
Rob