At the web page
http://www.uk.research.att.com/archive/vnc/sshvnc.html
Making VNC more secure using SSH:
I have a question about the paragraph More advanced
use:
In fact, the connection can be forwarded to a port on
a third machine at the other end - it doesn't have to
be snoopy that's running
TC MA said:
[snip]
How to setup vnc over ssh so that connections between
snoopy (machine linux1) and third machine WILL be encrypted?
That would require two SSH tunnels. Something like (untested):
machine1 $ ssh -L 5901:localhost:5904 linux2
linux2 $ ssh -L 5904:localhost:5901 machine3
Then