From charlesreid1

Connecting to a VNC Server

Insecure Connection

Secure Connection (SSH Tunneling)

See also: SSH#SSH Tunnels

First step: Create SSH tunnel

To connect to a VNC securely, the VNC connection can be passed through an SSH tunnel. To create an SSH tunnel from port 5900 on the local machine to port 5901 on the remote machine:

ssh   -c blowfish-cbc   -L 5900:localhost:5901  user@remotemachine

(the blowfish-cbc cipher is faster, making it easier to use VNC).

Typically, VNC connections happen on ports between 5900 and 5910.

Second step: Connect with COTVNC

To connect to remotemachine's VNC server, you'll tell Chicken of the VNC to connect to localhost, port 5900. Thanks to the SSH tunnel, anything going into/out of localhost port 5900 is passed through the SSH tunnel to the remotemachine's host 5901.