Re: secure terminal services

From: Matjaz Ladava (matjaz_at__nospam_ladava.com)
Date: 05/30/03 

Date: Fri, 30 May 2003 08:28:17 +0200

VPN is much more secure than publishing specific services. Why ? Because it
hides what services are you using. If you have service published to the
internet (RDP), the attacker, can discover your services with portscanner
and then attack specific service, meanwhile if you are using VPN, then it is
impossible to know what services ate you using trough the tunnel.
If you have problem setting up VPN, then describe your configuration and the
problems you are having.

Regards

Matjaz Ladava

"Bjoern" <bj@whanau.net> wrote in message
news:ufD6bXmJDHA.2244@TK2MSFTNGP10.phx.gbl...
> Hello,
> I too have been wondering about this, do you need to use a VPN, even if
you
> use a firewall with TS being published on the web, could you not set a
Group
> Policy of three strikes your out for the password, so without the password
> you basically cannot get in.
> Cheers
>
>
>
>
> "Matjaz Ladava" <matjaz@_nospam_ladava.com> wrote in message
> news:enDMwPHJDHA.276@tk2msftngp13.phx.gbl...
> > Well there is no SSL for RDP protocol. As Lanwench suguested instead of
> > opening your server to the outside, allow just VPN connection, but I
would
> > remind you, that instead of exposing your server directly to the
internet,
> > use firewall and securely publish your services trough firewall.
> >
> > Regards
> >
> > Matjaz Ladava
> >
> > "Exped24_M" <exped24@hotmail.com> wrote in message
> > news:usX2yPGJDHA.3084@tk2msftngp13.phx.gbl...
> > > I am talking about Terminal Service build in win 2000 advanced server
> > >
> > > any SSL harden password option
> > >
> > > thanks
> > >
> > > "Lanwench [MVP - Exchange]"
> > > <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> > message
> > > news:%23DfC5$FJDHA.1360@TK2MSFTNGP10.phx.gbl...
> > > > Are you talking about TSWeb?
> > > >
> > > > Exped24_M wrote:
> > > > > How do I tell the Terminal service to use the SSL?
> > > > >
> > > > > thanks
> > > > >
> > > > >
> > > > > "Lanwench [MVP - Exchange]"
> > > > > <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote
in
> > > > > message news:uYrPpiFJDHA.3272@tk2msftngp13.phx.gbl...
> > > > >> SSL, and ideally don't allow access to anything other than
through
> > > > >> VPN (with the exception of 25 for your mail server if you run
one,
> > > > >> and whatever else you need open)
> > > > >>
> > > > >> Exped24_M wrote:
> > > > >>> Hi all,
> > > > >>>
> > > > >>> I am using the terminal service on win 2000 ads all working good
> > > > >>>
> > > > >>> now, I was hacking throw the terminal with password scanning
> program
> > > > >>> and the hacker gain access to my server
> > > > >>>
> > > > >>> is there any way for harder secure the terminal server, that can
> be
> > > > >>> harden to hack?
> > > > >>>
> > > > >>> Thanks for any advice
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Indecent pics of children and possession
    ... I think you have this arse about face; setting up secure and ... That's easy compared with VPN etc. ... Can you connect to the internet via Windows ... The police who trace ...
    (uk.legal)
  • Re: Internet Printing
    ... Does your short reply mean that VPN is the only secure way to do this? ... my Home computer network. ... printer from the internet when I'm on the road. ...
    (microsoft.public.win2000.networking)
  • Re: Access via internet?
    ... Personally I would NEVER expose to the Internet, a SQL Server/MSDE that I ... to do this kind of thing - Remote Desktop over a VPN is one of them. ... The most secure way to expose data over the Intenet is through XML Web ...
    (microsoft.public.sqlserver.msde)
  • Re: RDC Access for just one VPN Client
    ... If they are first making a vpn connection then I am not sure why you are ... then publishing the server. ... Forget the publishing and just configure the ...
    (microsoft.public.isa)
  • Re: Acessing Internet Through LAN (How Secure)
    ... >> accessing to a LAN. ... How secure is this method of ... You could just VPN in to another LAN that has Internet Access. ...
    (uk.telecom.broadband)