Posts Tagged ‘SSH’

Awhile back, I posted a guide detailing how you can configure CopSSH on your home computer and use it to securely route your Windows Remote Desktop traffic in order to add an extra layer of security to the whole process.

Typically, once Putty was configured and used to create the SSH tunnel to the remote machine, all I would need to do is simply create a loopback RDP connection on port 3390, and I was in business.  In my testing of Windows 7, I found that when attempting to create a loopback connection on port 3390, I would receive an error that a connection was already established.  The exact error reads as follows:

Your computer could not connect to another console session on the remote computer because you already have a console session in progress.

I changed Putty’s configuration to forward on port 3391 instead of 3390, and the problem was solved.  I’m not sure why Windows 7 establishes some sort of connection on 3390, but at least the workaround is pretty painless.

I just wanted to pass along this info for anyone having issues with RDP tunneling.

Download This Guide in PDF Format

I like having the ability to remotely access my PC at home while I am away in case I want to grab an important file I have left there, or if I need to finish something I didn’t quite get around to.  For ages I simply set port forwarding on my router allowing port 3389 to be directed to my desktop PC, which let me connect to my computer using Microsoft Remote Desktop Protocol (RDP).  While this was not the most secure method of doing so, it worked, and I did not want to change how I did things.

That’s not to say that RDP is not secure – it does use 128 bit RC4 according to Microsoft.  However, with man-in-the-middle attacks being relatively easy to carry out, I thought there had to be a better (and more secure) way of connecting to my oh so precious home network.

In the end, I decided that I could route my RDP sessions through an SSH tunnel and sleep a little easier at night.  If you follow the directions below, you can too.

Going forward in this document, I will use the term “Server” to refer to the remote computer (in my case, my home PC) that we will be connecting to.  I will use the term “Client” to refer to my local computer, the computer I will be connecting from.

Installing CopSSH

1) Download CopSSH, Putty and Puttygen.

2) Execute the CopSSH installer, click Next to proceed, then click I agree to accept the license agreement.

Continue reading “Securing Windows Remote Desktop with CopSSH” »