Any networking gurus out there?

[BrianG]

Originally Posted by kraegar

I tunnel rdp over ssh.

The only client required is an ssh client (putty for windows, builtin on any linux, or OS X), and an rdp client. The only port open is ssh, which is obviously very secure. Then I turn off password auth, and only allow key exchange. I use a plug computer for the ssh server, though I used to use a old router with openwrt.

It's cheap, easy, portable, and secure.

For DNS I use dyndns.org

My webserver (when it's up) is also on the plug computer.

Tony

You posted that while I was typing.

That sounds like the way I want to go. Do you have more info on what you describe? BTW, I'm using dyndns.org as well.

[kraegar]

Originally Posted by BrianG

You posted that while I was typing.

That sounds like the way I want to go. Do you have more info on what you describe? BTW, I'm using dyndns.org as well.

It's really simple. Find some unix based device, doesn't matter what. Anything running unix, linux, OS X, whatever. (You can do it with Windows stuff, and some ssh software out there, but outside of a few commercial products, it doesn't seem as robust to me. But then I'm a unix admin).

Set ssh to run on whatever port you want. Set your router to forward that port to the ssh box. I don't believe you gain much security by using a non-standard ssh port, but some people do. Set up key management if you want to require key based authentication. Doing so means always having your key with you. I store mine in dropbox, and on my android phone.

SSH in. I'll give the example of using putty, since it's "more complex". Set up your ssh connection to go to your hostname & ssh port. Then in the settings, under ssh->tunnels you want to put in your rdp tunnel.

There's a local port box, and a remote box that's longer. In local port put any local port, say 3389. In the remote box put the INTERNAL IP of the machine you want to rdp to, and the port (3389 by default). So maybe this:

local: 3390
Remote 192.168.1.50:3389

open your ssh connection and login.

Start your rdp client, and rdp to:
localhost:3390

And it'll connect you to your desired destination.

I can email a screenshot if you need more clarification.

Tony