Greetings and thanks for reading this.
I can successfully use Leopard's screen sharing feature on three
different macs when on the same LAN but have yet to make it work over
the internet. (I suspect that the router does not know where to direct
my vnc request.)
LAN works - WAN doesn't.
Any help/suggestions/references would be appreciated.
> Greetings and thanks for reading this.
> I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 3 lines]
> LAN works - WAN doesn't.
> Any help/suggestions/references would be appreciated.
Have you configured the router at the destination to forward traffic on
the sharing port ot the destination computer?

Signature
Tom Stiller
PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3 7BDA 71ED 6496 99C0 C7CF
YA_MacUser - 30 May 2008 23:24 GMT
> > Greetings and thanks for reading this.
> > I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 6 lines]
> Have you configured the router at the destination to forward traffic on
> the sharing port ot the destination computer?
Thanks for your reply.
Yes, I've chosen a non-standard port number (1948) in the interest of
security and have the remote router forward that to a specific computer
on which I'm a user listed for screen sharing. I use the screen sharing
app on my end and enter the remote address as "xxx.xxx.xxx.xxx:1948"
but nothing happens (timeout.) I expect to get a registration or login
screen; am I wrong?
Tom Stiller - 31 May 2008 00:01 GMT
> > > Greetings and thanks for reading this.
> > > I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 14 lines]
> but nothing happens (timeout.) I expect to get a registration or login
> screen; am I wrong?
You are using port 1948 on both ends; right?
Personally, I do all my remote access tunneled through ssh which I've
configured to only permit login using public key authentication.

Signature
Tom Stiller
PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3 7BDA 71ED 6496 99C0 C7CF
Jolly Roger - 31 May 2008 01:23 GMT
> > > Greetings and thanks for reading this.
> > > I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 10 lines]
> Yes, I've chosen a non-standard port number (1948) in the interest of
> security
BTW, changing the port doesn't make VNC any more secure. It's still just
as vulnerable to brute force and other attacks. One good way to secure
VNC is to tunnel it through SSH.

Signature
Please send all responses to the relevant news group. E-mail sent to
this address may be devoured by my very hungry SPAM filter. I do not
read posts from Google Groups. Use a real news reader if you want me to
see your posts.
JR
> Greetings and thanks for reading this.
> I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 3 lines]
> LAN works - WAN doesn't.
> Any help/suggestions/references would be appreciated.
VNC is a very insecure service, so I wouldn't advise you open that port
up to the public internet without learning all about the security
implications and how to secure the service well.

Signature
Please send all responses to the relevant news group. E-mail sent to
this address may be devoured by my very hungry SPAM filter. I do not
read posts from Google Groups. Use a real news reader if you want me to
see your posts.
JR
Salut YA_MacUser
> Greetings and thanks for reading this.
> I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 3 lines]
> LAN works - WAN doesn't.
> Any help/suggestions/references would be appreciated.
did you try to initiate the screen sharing session through iChat?
Cheers
Andreas

Signature
MacAndreas Rutishauser, <http://www.MacAndreas.ch>
EDV-Dienstleistungen, Hard- und Software, Internet und Netzwerk
Beratung, Unterstuetzung und Schulung
<mailto:andreas@MacAndreas.ch>, Fon: 044 / 721 36 47
> Greetings and thanks for reading this.
> I can successfully use Leopard's screen sharing feature on three
[quoted text clipped - 3 lines]
> LAN works - WAN doesn't.
> Any help/suggestions/references would be appreciated.
You need a WAN address somewhere. LAN addresses are only unique on your
LAN. If only your router has a WAN address, you must configure it to
forward traffic to your computer.
You can be sure that bots will be guessing your passwords non-stop as
soon as your computer becomes visible to the outside. You'll need good
passwords if you want to remain the owner of your computer. You can get
some bandwidth back by blocking traffic from all of China, Russia,
Romania, Ukraine, Korea, Thailand, Taiwan, India, Nigeria, Egypt,
Brazil, Turkey, Germany, and Spain. Then there's the MCI crime gangs at
63.64.0.0/10, AT&T bots, Bell Canada bots, Comcast bots, plus never
ending security breaches at The Planet, Microsoft, Yahoo, and Google.
Actually, maybe a whitelist is easier.

Signature
Block Google's spam and enjoy Usenet again.
Reply with Google and I won't hear from you.