There seems to be some confusion about what this is.  Let me see if I 
can clear up what and why it is different from other proxies.

You can get a proxy that will send RFB through a firewall, say 
http://www.wilson.co.uk/Software/vnc/proxy/VncProxy.htm from John 
Wilson.  You con configure the proxy so that your firewall is listening 
on some port and that is proxied through to an internal port.  You 
could also make this proxy listen on port 80.  Now set the VNCViewer to 
talk on port 80 and the RFB packets will go through your firewall.

Most outbound firewalls will let port 80 through, so configuring a 
proxy on your (incoming) firewall on port 80 would appear to allow 
access from within anyone else's firewall.  There are two problems.

1) What you are passing across the net is not HTTP packets but RFB 
packets.  Some firewalls (I've met them) will filter based on content 
and so anyone within one of these firewalls will not be able to access 
your VNCServer.

2) If you set the proxy to listen on your firewall on port 80 you can't 
also run a webserver on that port.

This code solves both these problems.  The modified VNCViewer 
communicates, by default, over port 80.  It wraps all the RFB packets 
in HTTP so the packets are honest, bona fide web requests.

The webserver running on your firewall must be running a Servlet 
container and the web requests from the VNCViewer are passed to the 
running Servlet (VNCProxyServet).  The Servlet takes the RFB packet out 
of the HTTP request and forwards this on to the real VNCServer.  It 
also takes RFB data from the real VNCServer and sends it back to the 
VNCViewer - again in an HTTP packet.

I hope that help clarify a little.

Jim

> 
> On Wednesday 04 September 2002 12:41, Jim Redman wrote:
> > Since it seems that what you really want to do is tunnel through
> http,
> > here's something I've been working on.  It seems to work (I've been
> > using it for a short time). I don't have any time to work on it
> further
> > at the minute and I won't have much time to help people with any
> > problems (sorry).  If anyone want's to help/take ownership, let me
> know.
> >
> > http://www.ergotech.com/misc/VNCProxy.html
> >
> > Jim
> >

-- 

Jim Redman
(505) 662 5156
http://www.ergotech.com
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to