Help - vnc routing error through firewall

Hi All - newbie question

I'm trying to vnc into a win2k box behind a masquerading firewall/router - a snapgear lite (embedded linux device) which I've set up for a small client business. Latest VNC.



The following incoming ports are blocked:

20, 21, 69, 137, 139, 194, 546 currently and the server's patched up to the max running AV stuff and has languard's file integrity checker running on it as well as a couple of other bits of security software. I'm going to setup a deny all/allow some policy tommorow but that's irrelevant.

No outgoing ports are blocked.

I can hit into and configure the firewall's web interface from outside. Let's say its external address is 10.10.10.6 It supports port forwarding. The internal machines are using private addressing - the target server is 192.168.0.1 I've set up an incoming forward of 10.10.10.6:5800 to 192.168.0.1:5800
and the same for 5900

I enter http://10.10.10.6:5800 and get a VNC authentication dialogue box. Enter the password I set in their and eventually get:

Network Error: no route to server 10.10.10.6 So I'm guessing the problem is outgoing.

The win2k server is on SP2 + various security patches


The routing table on the snapgear router/firewall has the following entry for their network:


Destination Gateway Genmask Metric Interface
192.168.0.1 0.0.0.0 255.255.255.0 0 eth0

Now intuitively I would expect the gateway to be set to 192.168.0.254 which it is on the win2k server.

I've also tried the vnc client and got "failed to connect to server".

Help!!

[Omega]

I think the gateway address is fine blank, because it's using itself as a gateway. It would seem that the Win2k box should have its gateway set as 192.168.0.1, though, rather than 192.168.0.254.

Just out of curiosity, what distribution/version of VNC are you using?

Hi there,

I also get the same error like No route to host xx.xx.xx.xx when i use java viewer from browser...

Can anyone help me..

Regards,
Niranjan

[Keefe]

Some versions of VNC use different ports for different things within the program. In order to get mine working I had to forward 5800-5999 to the machine I wanted to run VNC on.

Hope that works!