Hey folks,

  I have successfully port forwarded a vnc session from my linux 
workstation at work, to a Windows 2000 laptop sitting on my desk.  Now I 
wanted to get a little more fancy and encrypt the vnc session over a ssh 
tunnel.  I know I must change the way netfilter is forwarding the 
port... but I'm not sure... here's my original statement:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 5907 -j DNAT --to 
192.168.0.25:5907

So if my laptop is "laptop" and my workstation is uhh "clown" I can use 
vnc to connect to "clown:5907" and it brings me right to the Win2k 
laptop vnc server.  Now I want to create a tunnel (which I can do 
already) from my home machine to work, then once it arrives at work and 
comes through the tunnel, get forwarded to the laptop.

"localhost:5907" ---> ssh tunnel ---> "clown:5907" ---> netfilter ---> 
"laptop:5907"

What changes must I make in the statement for this to work?

                                                  -- Fred


Reply via email to