[~bash $]

I am wondering how I can effectively have access control on the VNC service in Mac OS X (10.5.1). Any ideas how this might work in OS X?

This is easy to do with ssh control, for instance, which secures port 22 to only accept connections. So various solutions might include port forwarding a VNC port over ssh, or some kind of access control restriction similar to 'hosts.allow'. But I'm unfamiliar with the details and do not want to run a vnc server that can be accessed from anywhere.

Any help would be greatly appreciated. Thanks.

[mduell]

Do you want VPN or ssh?

[Steve Bosell]

The command to tunnel it over SSH is:
ssh -L 1202:localhost:5900 remote-host

then from "Connect to server", use vnc://localhost:1202

[~bash $]

Hey, thanks for the tunneling command! It always gives me a headache. How do I secure the server side so that no one can connect to it outside of the tunnel?

Regarding the VPN/SSH question: Over ssh is ideal, as obviously fewer people have access to ssh to my remote machine. My ssh is currently set up only to allow people within the VPN space, so it does get confusing for me. Anyway, setting up VNC via ssh would be the way I want to go.

Thanks ...

[besson3c]

Will you be connecting from a static IP or a static subnet?

[~bash $]

Static subnet.