Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Port forwarding NAT/router/firewall for any VNC

Post Reply
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Port forwarding NAT/router/firewall for any VNC

Post by redge »

UDP port is not used, if possible don't open unused port by VNC

If your ISP provide you a dynamic IP to you, you need to subscribe to a dynamicDNS service provider supported from your NAT broadband router and put your hostname freshly created and configure it to forward external port to your internal ip address port of your NAT/ broadband router
or
If your ISP provide you a static IP to you, you need to forward external port to your internal LAN port IP address configure it to your NAT/router.

[syntax="text"]
Single Port Forwarding

Application | External | Internal | Protocol | IP Address | Enable
------------------------------------------------------------------------
vnc0 | 5900 | 5900 | TCP | 192.168.1.100 | yes
vnc1 | 5901 | 5900 | TCP | 192.168.1.101 | yes
vnc2 | 5902 | 5900 | TCP | 192.168.1.102 | yes
vnc3 | 5903 | 5900 | TCP | 192.168.1.103 | yes
------------------------------------------------------------------------
[/syntax]

myhost.domain.com:5900 --> redirected internally to 192.168.1.100:5900
myhost.domain.com:5901 --> redirected internally to 192.168.1.101:5900
myhost.domain.com:5902 --> redirected internally to 192.168.1.102:5900
myhost.domain.com:5903 --> redirected internally to 192.168.1.103:5900
myhost.domain.com:5904 --> redirected internally to 192.168.1.104:5900


incoming from WAN to LAN
port 5500 TCP protocol --> ip/hostname --> vncviewer listening
port 5800 TCP protocol --> ip/hostname --> winvnc http VNC server http
port 5900 TCP protocol --> ip/hostname --> winvnc rfb VNC server
port 5901 TCP protocol --> ip/hostname --> ultravnc repeater
port 0443 TCP protocol --> ip/hostname --> https ssl (and repeater_ssl)


outgoing
from LAN to WAN (necessary only for enabled firewall like XP SP2 Windows Firewall or any strong software/hardware firewall)
port 0443 TCP protocol --> ip/hostname --> https ssl or repeater_ssl (SingleClick III aka SCIII)
port 5500 TCP protocol --> ip/hostname --> winvnc reverse connection (SingleClick)
port 5800 TCP protocol --> ip/hostname --> web browser act as vncviewer
port 5900 TCP protocol --> ip/hostname --> vncviewer

http://www.simpleportforwarding.com/node/8
Simple Port Forwarding works with WebPages and not directly with your router. Making it a safe program to use. Its no different than using Firefox, IE or any other browser to setup port forwarding yourself.
The program works by automating the process for you. So whether you don't understand how to forward ports, or your simply looking for an easier way to forward ports then this program is for you.
Its port forwarding made simple.



http://www.portforward.com/routers.htm
has a long list of different routers and easy step by step on port forwarding for almost any broadband router including (ADSL/CATV)


Just select your broadband router spam, then the router model, then select VNC from the list of programs to forward. It will show, pictures and all, how to forward a port for VNC.

hint from [user=3463][/user]
----------------------------------------



FQDN= Fully Qualified Domain Name
A fully qualified domain name consists of a host and domain name, including top-level domain.
For example, www.uvnc.com is a fully qualified domain name.
www is the host,
uvnc is the second-level domain,
.com is the top level domain.

for reach your vnc server from vncviewer:
Image ImageImage



for reach your vnc server from web browser:

port 80 is standard http port and not usable if you have web server
but 5800 is not a standard port for http so you need follow step below:

don't forget to put http:// at header
testing port if open or closed

connecting to UltraVNC Server
winvnc must started and listen port 5900 before start the test port for have an answer by ping or grc port probe
https://www.grc.com/x/portprobe=5900

or

UltraVNC server connecting to UltraVNC viewer ?
(reverse mode, aka call back)
vncviewer must started and listen port 5500 before start the test port for have answer by ping or grc tester
https://www.grc.com/x/portprobe=5500
Last edited by redge on 2009-12-25 12:40, edited 17 times in total.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
jitsarma
Posts: 1
Joined: 2012-12-19 14:14

Re: Port forwarding NAT/router/firewall for any VNC

Post by jitsarma »

Hi,

I want to use Single click and I have multiple host account I have tried to create sc and that only work for single user, now I want to configure a helpdesk file which allow to select the technician name and connect, I would like to use the repeater because my router have limited port forwarding option here, if you can help me with the repeater and helpdesk.txt file, I will be greatly helped here, I've searched through the all internet haven't found anything now and also want tried creating 100 of sc file but no luck yet.



regards,
Bipra
gtsolid
Posts: 3
Joined: 2019-11-03 19:14

Re: Port forwarding NAT/router/firewall for any VNC

Post by gtsolid »

Do i have to port forward ALL the ports?
Post Reply