Comment 14 for bug 275340

@ anatoly techtonik

I completely agree with your statement. Keep in mind that you can simply block all ports but 22 (ssh) as a workaround.

As I said in comment #8:
The localhost option seems to have been removed from the project in vino 2.26.0-0ubuntu1 (Jaunty).
I'm guessing they couldn't make it work properly so they just took it out.

And in comments #11 & 12:
As mention in the upstream bug by Jonh Wendell :
"local_only preference is now obsolete. Now you are able to select a network interface which vino must listen to."

The select network interface is not available (I do not see it) but when this is fixed you should should be able to say select localhost and that will block all requests from the outside.