Securtiy of forwarding RDP

Well, no it's not safe. Is it safe enough for you? I can't answer that.

It's succeptible to man in the middle, you've made no mention of enryption, anyone can poke away at the password, you've made no mention of strong authentication.

Were I to be tasked with hacking your network, this would be by far the easiest route, since simply getting your username and password (insert dozen different methods here) would yield me complete control of a workstation inside the LAN.

-Russ.

Wayne McGlinn Brisbane, Oz

Yours, VB.

In message , Wayne writes

But then never mentions them again!

Anyone know where control of encryption is in XP?

I am in complete agreement with Volker here. I only use RDP inside the network or over encrypted VPN. Opening an RDP port like that to the Internet is a major security hole.

1. MS RDP is not a safe protocol. see
   formatting link
   and the other security vulnerabilities of this protocol.
2. If you still want to use MSRDP I would recommend you rename the Administrator account to something else and rename the Guest account to Administrator and make sure it is disabled.
3. try to restrict the IPs that can connect to it from remote. i.e. you know that the only persons that are going to connect to it are you and another admin, add a firewall rule to restrict the connections to your homes DSL IPs
4. change the outside ports to something not in the 33xx range, ex. use

1. if possible use an IPSEC gateway to encrypt the traffic between you & the PIX

Mike Bailey wrote: