F7 Security Level Tool won't open ports for VNC

[awilcox]

Hello,

After hours trying to figure why I can ssh into my Fedora 7 machine but can't VNC in, I've concluded it's the Security Level Config Tool ...

When I add "other ports" like 5900, tcp and "apply" it looks OK, but as soon as I "OK" out of the tool, it didn't take (I come back in, and 5900 isn't there anymore.) If I run iptables -L I don't see any changes. And, of course, I still can't VNC into the machine.

I selected "disable" the firewall and applied. Exit. Come back and the firewall is still on.

Q1: What's the problem with the tool?
Q2: How can I turn off the firewall?

Thanks,
Alan

[Seve]

Hello:
This, I believe is a bug, sorry I cannot find the link at the moment.
However, from a terminal
system-config-sercuritylevel
and un-check the SSH trusted service and then make your changes, they should stick.

Seve

[awilcox]

Thanks, Seve.

Turning off ssh caused a Y/N dialog box to appear, and that seemed to cause a write operation. Did it so I got 5900, 5901, and 177 to stick at least. Even got it to disable (I think).

Still getting a "connection refused" message when I try to VNC in though.

I'd like to run VNC in a secure ssh tunnel, but VNC is giving me a problem here!

Other ideas?

[Seve]

Hello:
If you have not already done so, you may want to have a quick read through Firewing1's how-to regarding vnc.
I have not tried using vnc to a F7 box at this point, sorry.

http://forums.fedoraforum.org/showthread.php?t=94257

Seve

[awilcox]

Seve,

Yes, I had been to Firewing1's how-to before I posted for help.

My Suse 10.2 does ssh and VNC with no problems, and I've been looking for differences that might give me a clue. Still not working yet tho!

Alan

[awilcox]

Originally Posted by awilcox

Turning off ssh caused a Y/N dialog box to appear, and that seemed to cause a write operation. Did it so I got 5900, 5901, and 177 to stick at least. Even got it to disable (I think).

A bit more back and forth, and finally got ports open properly. The trick is to make a change in something that causes a write operation. So I can turn off the firewall that way as well.

A bit of a kludge, but we have successful VNC connection now. The vnc1024 and vnc1024x8 described in above link didn't seem to work, but figuring that's for later.

PS: Discovered if I do ssh -X <host> I can execute a GUI application on the <host> without a lot of hassle ... and see it locally. A nice side benefit!

Many thanks!

Alan