I've been searching for hours now, can't figure this one out.
I am trying to make the following happen:
Client: remmina + ssh tunnel
Server: Lubuntu + openssh server (public key authentication) + vino server over ssh tunnel ONLY + allow client to only open 1 port (vnc port)
So far I can connect to my server apparently in both ways (with ssh tunnel and without it), which is unacceptable.
Running vino-preferences GUI doesn't help me much :s
So my question basically is:
- "How do I block any port opening on server and only single SSH port (22) and allow client to tunnel VNC over SSH via specific port (If it makes sense)?"
- No other type of VNC connection should be allowed
P.S. I plan to forward port 22 on router to my server and only allow SSH connections.