vnc_setup.sh

#!/bin/sh
#
# Set up TigerVNC connection to remote server.
#
set -eu

# Set up SSH tunnel to remote host on 127.0.0.1/5900.
ssh -L 8888:127.0.0.1:5900 -N -l amnesia s0

# Whitelist the 127.0.0.1 -> tcp/8888 to tcp/8890 traffic (otherwise denied by default on Tails).
iptables -I OUTPUT -o lo -p tcp --dport 8888 -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
iptables -I OUTPUT -o lo -p tcp --dport 8889 -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
iptables -I OUTPUT -o lo -p tcp --dport 8890 -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT

# On server side, start with:
# vncserver :0 -name d0 -geometry 1600x1200 -interface 127.0.0.1
# The :0 means that tcp/5900 is used. Kill with:
# vncserver -kill :0