Broadband Tech > Security > Security > How to secure VNC and port 5900

reply to jaynick

Re: How to secure VNC and port 5900

The concern was that IP is not me, it's from Asia. I was hoping it was just a probe but log said LAN access.

Yes, a machine on the internet is trying to access a machine on your LAN. That's what the router log means.

By port forwarding port 5900 to a machine on your LAN you're opening it up to everyone. You implied you understood that with you initial post.

What others have been trying to point out is is that your solution is to use secure VNC connections to that LAN machine.

Your choice is to do that (and have people try and hack it) or disallow all access from the internet. Your choice.
--
Don't feed trolls--it only makes them grow!

That's what I am trying to find out (a better alternative). I took the log entry to mean a successful access attempt.

I just thought I see the word attempt or blocked or something like that instead of just LAN access. Wasn't sure what to make of it. Any way I'll use one of the other suggested approaches.

The only thing I can think of, offhand, is to

• Enable port forwarding for 5900.

• Create a firewall rule to block (or only allow) port 5900 accesses from the internet for a single or small range of IP's.

Of course you'd have to know what internet IP(s) you may have (i.e. what are you). The firewall will prevent any port scanners from even reaching your LAN while you'll get through.
--
Don't feed trolls--it only makes them grow!

Bottom line is that all those entries were probes and attempts but not actual access. Correct? and a 63 char random password like I use for my wireless key would be as secure as it could get other than using other ways like mentioned above?

reply to jaynick