>Wow. I didn't even know Crapintoshes could do NAT... That's what IPNetRouter is for. And please don't insult Macs.
>But more to the >point, can't you just block all outsiders from ports 5800-5999? Those >are the ports VNC uses. That's probably the best idea. I don't recall whether IPNR will do that, but it should. Of course, this assumes VNC is "finding" the internal NIC as well as the external - I don't see any obvious reason why it shouldn't. >Oh, and if you're on a Mac you can only use >display 0 which would only use ports 5800(for the web service) and >5900(for the meat & potatoes) BZZZZT! Wrong! Well, right if you were only using the AT&T server. But ChromiVNC is a *lot* more flexible than that, kapiche? > > VNC persists in finding the internal NIC, and so the exposed IP and using > > it. While that works alright, I do not want to risk the exposure of VNC to >> the internet, but I cannot figure out how to tell it to use the "inside" > > IP, which is in the 192.168.x.x space. Dual-NIC setups on a Mac are somewhat unusual, hence the need for IPNR. If you can't make IPNR do what you need, contact me directly and I'll see about making a change to ChromiVNC for you, so it will "bind" to a specific address. -- -------------------------------------------------------------- from: Jonathan "Chromatix" Morton mail: [EMAIL PROTECTED] (not for attachments) website: http://www.chromatix.uklinux.net/vnc/ geekcode: GCS$/E dpu(!) s:- a20 C+++ UL++ P L+++ E W+ N- o? K? w--- O-- M++$ V? PS PE- Y+ PGP++ t- 5- X- R !tv b++ DI+++ D G e+ h+ r++ y+(*) tagline: The key to knowledge is not to rely on people to teach you it. --------------------------------------------------------------------- To unsubscribe, mail [EMAIL PROTECTED] with the line: 'unsubscribe vnc-list' in the message BODY See also: http://www.uk.research.att.com/vnc/intouch.html ---------------------------------------------------------------------
