On Fri, 2011-08-12 at 10:08 +0200, Paul van der Vlis wrote:
Hello,
I have customers with x2go installations in a local network behind NAT (fat clients), and I am looking for a way how to connect easy to them.
Of cause I can make a port forwarding, or an SSH tunnel from the fat client to my computer, but maybe you have a better and more flexible idea?
In earlyer times I used TightVNC. There was the great "-via" command, something like: vncviewer -via henk@server.henk.nl 192.168.0.33
Any ideas how to be flexible behind NAT with X2go? Hi, Paul. Let me make sure I understand. The server is on an internal network behind NAT and users on the outside need to come in to it?
If so, I would suggest changing the SSH port to a non-standard port and then allowing that port through your firewall. For extra security, you could move the X2Go server to a separate network separated from the main network by a firewall and only allow explicit access to needed resources from the X2Go server. That's what we do with the ISCS project for micro-perimeter security (iscs.sourceforge.net)