[X2go-User] Indirect connection

[John A. Sullivan III]

On Fri, 2011-08-12 at 10:08 +0200, Paul van der Vlis wrote: 
> Hello,
> 
> I have customers with x2go installations in a local network behind NAT
> (fat clients), and I am looking for a way how to connect easy to them.
> 
> Of cause I can make a port forwarding, or an SSH tunnel from the fat
> client to my computer, but maybe you have a better and more flexible idea?
> 
> In earlyer times I used TightVNC. There was the great "-via" command,
> something like:  vncviewer -via henk at server.henk.nl 192.168.0.33
> 
> Any ideas how to be flexible behind NAT with X2go?
Hi, Paul.  Let me make sure I understand.  The server is on an internal
network behind NAT and users on the outside need to come in to it?

If so, I would suggest changing the SSH port to a non-standard port and
then allowing that port through your firewall.  For extra security, you
could move the X2Go server to a separate network separated from the main
network by a firewall and only allow explicit access to needed resources
from the X2Go server.  That's what we do with the ISCS project for
micro-perimeter security (iscs.sourceforge.net)