FQDN not Resolving
-
@scottalanmiller I don't think I ever did expose it...
-
@JaredBusch I can access that but its the app when I open it rdp file it says cant access server
-
@christophergault said:
@JaredBusch I can access that but its the app when I open it rdp file it says cant access server
RDP will need opened. The entire point of RDS is to create an RDP session.
-
@JaredBusch Well how the living hell do I open it?
-
-
@JaredBusch And that is opened using?
-
@christophergault said:
@JaredBusch And that is opened using?
the firewall. All ports are managed using the same tools.
-
@scottalanmiller So the router firewall to be correct?
-
@christophergault said:
@scottalanmiller So the router firewall to be correct?
Well on the server too, but it should have automatically done that one when the roles were installed.
-
@christophergault said:
@scottalanmiller So the router firewall to be correct?
Well, ALL firewalls between the RDS server and the Internet. If any are blocking 3389, RDP isn't going to get out. The firewall touching the Internet needs to port forward to the server or nothing will be able to get to it.
-
@scottalanmiller I got it working!!!! I fell so accomplished. Jk
-
@christophergault said:
@scottalanmiller I got it working!!!! I fell so accomplished. Jk
Great!, now I can through a password cracker at it..
-
@JaredBusch said:
@christophergault said:
@scottalanmiller I got it working!!!! I fell so accomplished. Jk
Great!, now I can through a password cracker at it..
Note: I really will not, but this is part of RDS I hate. I need to find a
fail2banequivalent for Windows. -
@JaredBusch Well whats a best practice for protecting RDS?
-
I'm not the expert here, but a common practice is to keep it inside of the network and require people to connect via a VPN before connecting to RDP. The VPN, for security, would be best handled by being exclusive to a DMZ where the RDS server sat isolated from other traffic.
-
I thought common practice now was to use rds gateway so you only open port 443 and everything is passed through it.
-
@brianlittlejohn said:
I thought common practice now was to use rds gateway so you only open port 443 and everything is passed through it.
Which is a form of VPN
SSL VPN for a single port and application. But yes, that's the best way. Not sure if it is the most common in the SMB yet. -
@JaredBusch said:
@JaredBusch said:
@christophergault said:
@scottalanmiller I got it working!!!! I fell so accomplished. Jk
Great!, now I can through a password cracker at it..
Note: I really will not, but this is part of RDS I hate. I need to find a
fail2banequivalent for Windows.While not the same, one should have account lockouts set after some amount of bad attempts.
-
That would make DoS attacks super easy on your users, though.
-
@scottalanmiller said:
That would make DoS attacks super easy on your users, though.
can something like nginx (SP) sit in front for a fail2ban type server?
