Security: limit to lan only

[starfighter]

Hello,

is there an option to limit client access to lan only?
realvnc had an option to limit clients to 192.*

[rg270b]

Configure your firewall to accept conection only from your subnet on VNC port (default 5900)

[starfighter]

Configure your firewall to accept conection only from your subnet on VNC port (default 5900)

Is this the only solution?

[flyfishr64]

Hello,

is there an option to limit client access to lan only?
realvnc had an option to limit clients to 192.*

Yes. In the ini file, add the following to the [admin] section:

AuthHosts=-:+192.*

I think that will do it. The syntax isn't well documented but you can google for it.

[starfighter]

Sounds promising, I will give it a try

[starfighter]

Yes. In the ini file, add the following to the [admin] section:

AuthHosts=-:+192.*

Does not function...

[redge]

> Does not function...

reboot required

[sure]

> Does not function...

reboot required

Is the syntax different from RealVNC ?

It used to be:

[HKEY_LOCAL_MACHINE\Software\ORL\WinVNC3]
"AuthHosts"="-:+192.168.1"

so the asterix wasn't used.. How about it for the ini ?

## Just tested this and the syntax is exactly like for RealVNC
## except you don't use " and it's not in the registry but in the .ini file.
## so no * is needed to delimit a net-block. Example ultravnc.ini:

[admin]
AuthHosts=-:+62.133:+192.168.1:+195.64.95.1

the - tells winvnc to not allow anything,
the : is the separator, delimiter,
the + tells winvnc what to allow.
In this example the entire 62.133 net-block sees the open ultravnc port, as well as all the 192.168.1 LAN subnet users.