From owner-freebsd-questions@FreeBSD.ORG  Thu Jun 10 23:38:02 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C09D16A4CE
	for <questions@freebsd.org>; Thu, 10 Jun 2004 23:38:02 +0000 (GMT)
Received: from server.rucus.ru.ac.za (server.rucus.ru.ac.za [146.231.115.1])
	by mx1.FreeBSD.org (Postfix) with SMTP id 04D6A43D46
	for <questions@freebsd.org>; Thu, 10 Jun 2004 23:34:42 +0000 (GMT)
	(envelope-from oxo@rucus.ru.ac.za)
Received: (qmail 93329 invoked from network); 10 Jun 2004 23:34:14 -0000
Received: from shell-em0.rucus.ru.ac.za (oxo@10.0.0.1)
  by server-em0.rucus.ru.ac.za with QMQP; 10 Jun 2004 23:34:14 -0000
Date: Fri, 11 Jun 2004 01:34:14 +0200
From: John Oxley <oxo@rucus.ru.ac.za>
To: questions@freebsd.org
Message-ID: <20040610233413.GA22269@rucus.ru.ac.za>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: Terminal VNC server
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jun 2004 23:38:02 -0000

I have setup a terminal VNC server, and half-documented the way I did it
at http://oxo.rucus.net/docs/Terminal-Vnc-HOWTO

I am the sysadmin of a multi-user box and I am doing this for the plebs
who are members of the computer society (RUCUS http://rucus.ru.ac.za/).
What I want is an easy way of making vnc connections secure.  The
machine is firewalled from outside the LAN, but obviously not from
inside it.  I still don't like unencrypted data flowing over the
network.

For my own use, I use ssh tunnels to do the encryption, but that is far
beyond your Random Joe Fuc^WUser.  How can I make the connections over
vnc secure?  I would prefer not to delve into the source code, but will
if I have to.

TIA,

-Ox

-- 
/~\ The ASCII           ASCII stupid question, get a EBCDIC ANSI.
\ / Ribbon Campaign     John Oxley
 X  Against HTML        http://oxo.rucus.net/
/ \ Email!              oxo <at> rucus.ru.ac.za
"Personally, I'd rather pay for my freedom than live in a bitmapped, 
pop-up-happy dungeon like NT."
		-- Thomas Scoville