How to access Apple Remote Desktop (ARD) via VNC-over-SSH? asks how to tunnel ARD traffic over SSH. But the answer provided does not detail the steps required to do so.
Would some please provide the steps to setup a MacBook to:
- Disable ARD traffic on all forward facing interfaces
- Enable ARD traffic over SSH
ARD must be disabled on forward facing interfaces because it has an 8-character password limitation.
About all I have been able to find on Apple's site is Apple Remote Desktop: Connecting through a firewall, NAT or VPN and TCP and UDP ports used by Apple software products. Surprisingly, Apple seems to think its OK to hang an ARD listener off the internet with a weak password (sigh...).
According to HowTo: Tunneling VNC Connections Over SSH, the remote client should be able to use the following to connect to the MacBook (this may need to be changed to port 5900):
ssh -L 5901:localhost:5901 -N -f -l <user> <server>
The MacBook is a bit dated circa 2009, but its got 4GB RAM, 2.2 GHz Core 2 Duo, and OS X 10.9. So I think it meets requirements for this sort of thing. Its going to being used to donate cycles to open source projects that need access to OS X, so I hope so.
Thanks in advance.