On Wed December 19 2007 5:45:10 pm Norton, Jerry wrote:
> kernel = '/usr/lib/xen-3.0.3-1/boot/hvmloader'
> builder = 'hvm'
> device_model='/usr/lib/xen-3.0.3-1/bin/qemu-dm'
> memory = '256'
> disk = [
> 'phy:/dev/xendisks/base_deb,ioemu:hda,w','phy:/dev/cdrom,hdc:cdrom,r' ]
> name = base_deb'
> vif = ['type=ioemu,bridge=xenbr0,mac=00:19:c0:a8:01:c9']
> boot='c'
> vnc=1
> vncviewer=0
> vncunused=0
> vncdisplay=2
> vnclisten='0.0.0.0'
> serial='pty'
When Igor says 'bind vnc to localhost', the simple way to do that is 
vnclisten='127.0.0.1'. Then only someone who has ssh access to the xen server 
can get a vnc window. He's also right that either sdl or vnc must =1. That 
bit me recently when vnc was failing. And his iptables trick is also nice. 
Note that the iptables '--dport' option accepts a port range, as in '--dport 
5900:5910', etc. 
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users