From owner-freebsd-questions@FreeBSD.ORG Fri Jul 1 04:59:24 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8CF9916A41C for ; Fri, 1 Jul 2005 04:59:24 +0000 (GMT) (envelope-from freebsd@philip.pjkh.com) Received: from zhonka1.zhonka.net (zhonka1.zhonka.net [66.228.195.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6779643D1D for ; Fri, 1 Jul 2005 04:59:24 +0000 (GMT) (envelope-from freebsd@philip.pjkh.com) Received: from wolf.pjkh.com ([66.228.196.74]) by zhonka1.zhonka.net (Post.Office MTA v3.5.3 release 223 ID# 0-58414U4500L450S0V35) with ESMTP id net; Thu, 30 Jun 2005 21:59:23 -0700 Received: from localhost (localhost [127.0.0.1]) by wolf.pjkh.com (Postfix) with ESMTP id 910C358C6; Thu, 30 Jun 2005 21:59:14 -0700 (PDT) Received: from wolf.pjkh.com ([127.0.0.1]) by localhost (wolf.pjkh.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88559-08; Thu, 30 Jun 2005 21:59:14 -0700 (PDT) Received: by wolf.pjkh.com (Postfix, from userid 1000) id 59F3C58BA; Thu, 30 Jun 2005 21:59:14 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by wolf.pjkh.com (Postfix) with ESMTP id 5205854BF; Thu, 30 Jun 2005 21:59:14 -0700 (PDT) Date: Thu, 30 Jun 2005 21:59:14 -0700 (PDT) From: Philip Hallstrom To: Anthony Chavez In-Reply-To: Message-ID: <20050630215633.E90475@wolf.pjkh.com> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Scanned: by amavisd-new at pjkh.com Cc: freebsd-questions@freebsd.org Subject: Re: VNC multiplexer X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2005 04:59:24 -0000 >> On 6/26/05, Anthony Chavez wrote: >>> I've got a client that would like to be able to connect to VNC servers >>> behind a FreeBSD gateway. Said servers are assigned dynamic IPs via >>> DHCP, so port mapping (via pf) is not an option (AFAIK). However, we >>> intend to make use of dynamic DNS, so they will at least have hostnames. I missed the first part of this, but would proxying the VNC connections through an intermediate SSH server help at all? http://www.pjkh.com/wiki/vnc_through_an_ssh_proxy You could setup individual SSH tunnels for each machine in question. The tunnel would stay the same regardless of the IP... and the VNC viewer would connect to localhost so you'd never really need the server IP. Anyway, just a thought... -philip