RDP issue. any advice??

[wannaBgeeksquad]

im running a mail server right now and a client is gonna be leaving soon for a month. he basically wants to RDP to his pc from home. how do i forward the ports on my linxus router to ensure that this only accesses his computer. i need this to be as secure as possible also..

any server changes i need to make??

hes not on the attached to my domain yet, would it be easier if he was??

any help would be greatly appreciated.

 

[BigFunkyChief]

Sounds like you just want to forward port 3389 (for Remote Desktop) on your Linksys router to the IP address of his computer. If you had a fancier router, you could use a firewall rule to lock down RDP to only his IP address...but if it's a Linksys router (not sure you were saying Linksys or Linux) then you don't have that much control.

But simply forwarding port 3389 (start port and end port are both 3389) to the IP address of his machine (hopefully it's static, or if it's dynamic hopefully it doesn't change) will do the job. He will then RDP to the public WAN IP address of your Linksys router (or DNS name on the Internet of that IP) and he should be all set.

Make sure you check the 'Enabled' box when forwarding the port in your Linksys router to activate that rule. Good luck.

Scott

"Rule #1 - When stumped, check your Event Logs!

 

[58sniper]

I wouldn't do 3389. I'd assign another port number, like 3390 to it.

How to change the listening port for Remote Desktop

http://support.microsoft.com/kb/306759

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[BigFunkyChief]

Good call.

"Rule #1 - When stumped, check your Event Logs!

 

[wannaBgeeksquad]

cool thanks for the advice guys.

 

[DavisNT]

More secure would be to use some kind of VPN (for example OpenVPN )...

 

[wannaBgeeksquad]

i thought i needed a dedicated vpn box in order to set up a vpn network behind my router??

 

[58sniper]

No, you don't. BUT - if you use a VPN, your organization is legally responsible for what's on the machines connecting. Including licensing.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[DavisNT]

OpenVPN is simple software-only VPN solution, suitable for Windows and Linux.

See for your self

http://openvpn.net/

OpenVPN has several advantage over MS VPN...

 

[BigFunkyChief]

DavisNT, could you explain the main benefits of using OpenVPN vs. MS VPN in a Windows network? The main benefit that I see of using MS VPN on a Windows network is the one time authentication to Active Directory, you are authenticated to the entire network. That's very important for our end users, which is who the VPN is really made for.

Could you share some info with us on how maybe other VPN solutions integrate with Active Directory?

"Rule #1 - When stumped, check your Event Logs!

 

[wannaBgeeksquad]

i ended up going with gotomypc.com, seems to be pretty well maintained and functioning just right. does anyone know any flaws i might run into with this service, or any heads up io would need??

 

[58sniper]

It's not as safe as an RDP connection to the workstation, or a VPN connection.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[cmeagan656]

Have a look at LogMeIn

https://secure.logmein.com/welcome/get_logmein_free/signup.asp.

I've used the free version frequrently and its nice and secure. All you need is a java enabled web browser.

Cheers.