4 ms·
Another alternative is to install an SSH client and setup an automatic connection with your server (using a password-less key). Just forward RDP and don't let t
by archi42 4y ago
Another alternative is to install an SSH client and setup an automatic connection with your server (using a password-less key). Just forward RDP and don't let the user open a shell. I think that's possible via ForceCommand in the sshd config [1]. So if the client machine is hacked, your server will not be compromised.
Disclaimer: I didn't test this, so no guarantee it's 100% secure. Specifying no-pty or Command in the authorized_keys files doesn't seem enough, though.
[1] https://askubuntu.com/questions/48129/how-to-create-a-restricted-ssh-user-for-port-forwarding https://askubuntu.com/questions/48129/how-to-create-a-restri... Check the accepted answer.