KVM:VNC连接被阻止

我使用三个客户端虚拟机运行KVM主机。 两个Ubuntu服务器和一个Windows服务器R2 2008。

所有三个虚拟机都在其XMLconfiguration文件中启用了VNC选项:

<graphics type='vnc' port='5910' autoport='no' listen='0.0.0.0' keymap='de'> <listen type='address' address='0.0.0.0'/> </graphics> <graphics type='vnc' port='5911' autoport='no' listen='0.0.0.0' keymap='de'> <listen type='address' address='0.0.0.0'/> </graphics> <graphics type='vnc' port='5912' autoport='no' listen='0.0.0.0' keymap='de'> <listen type='address' address='0.0.0.0'/> </graphics> 

给定的端口在开始时打开:

 user@kvm-host:~$ netstat -tpln Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1061/rpcbind tcp 0 0 192.168.100.1:53 0.0.0.0:* LISTEN 2811/dnsmasq tcp 0 0 0.0.0.0:5269 0.0.0.0:* LISTEN 1844/beam tcp 0 0 0.0.0.0:5910 0.0.0.0:* LISTEN 4497/qemu-system-x8 tcp 0 0 0.0.0.0:40758 0.0.0.0:* LISTEN 1844/beam tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1680/sshd tcp 0 0 0.0.0.0:5911 0.0.0.0:* LISTEN 4532/qemu-system-x8 tcp 0 0 0.0.0.0:5912 0.0.0.0:* LISTEN 2844/qemu-system-x8 tcp 0 0 0.0.0.0:5280 0.0.0.0:* LISTEN 1844/beam tcp 0 0 0.0.0.0:5281 0.0.0.0:* LISTEN 1844/beam tcp 0 0 0.0.0.0:38724 0.0.0.0:* LISTEN 1131/rpc.statd tcp 0 0 0.0.0.0:5222 0.0.0.0:* LISTEN 1844/beam tcp6 0 0 :::111 :::* LISTEN 1061/rpcbind tcp6 0 0 :::4369 :::* LISTEN 1753/epmd tcp6 0 0 :::22 :::* LISTEN 1680/sshd tcp6 0 0 :::52896 :::* LISTEN 1131/rpc.statd 

我已经添加了一个规则到iptables:

 sudo iptables -L ACCEPT tcp -- anywhere anywhere tcp dpt:5911 ACCEPT tcp -- anywhere anywhere tcp dpt:5910 ACCEPT tcp -- anywhere anywhere tcp dpt:5912 

但我无法通过远程连接vnc! 我可以通过telnet连接本地主机到端口5910.本地telnet连接返回RFB 003.008。 但是当从外部连接时,连接耗尽。

我能做什么?