Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What do you use for remote access?

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 57 posts

Re: Ask HN: What do you use for remote access?

#31

Post by theCodeStig »

All you need is SSH and SSH config. There are a lot of tutorials out there, but I find many of them are based on older versions of SSH which lack a bit more sugar around proxying.

Essentially you will add a directive to SSH config for the NAT host, and the host that you want to access. In the directive for the host to access, you will specify that you're proxying through the NAT host.

You can then leave out all of the port forwarding options when connecting to the target host, SSH will pick that up from the config file.

Re: Ask HN: What do you use for remote access?

#33

Post by Mandatum »

jimmaswell wrote: post #28

SSH for Linux or TeamViewer for Windows, there's also Hamachi for Linux which worked when I needed to use it once

Be sure to use 2FA on TeamViewer. 3 months ago accounts were bruteforced and thousands of PC's were hacked as a result of guessing the one-time-user-password (4-digits).

TeamViewers response was to bury their head in the sand until Ars interviewed them to which they said "none of this is our fault, 2FA is working fine, people being hacked is unrelated to TeamViewer".

In reality TeamViewer wasn't properly rate limiting or blacklisting IP's for making too many guesses at the one-time-password. They made no customer outreach to suggest using 2FA. They didn't acknowledge the attack for 2 weeks until the Ars article, aside from replies to emails saying they should talk to their local police department.

TeamViewer is still the best tool out there for remote access for Windows computers on corporate networks and personal use I find. However their handling of the attack was pathetic.

Re: Ask HN: What do you use for remote access?

#37

Post by b3lvedere »

stuxnet79 wrote: post #6

I tunnel everything through ssh (both local and remote port forwarding) and in some cases for the exact use-case you have mentioned (web server running on a raspberry pi that is behind a NAT). It works for me. I've never set up a VPN and I'm not too knowledgable about them. Should I set one up? I don't know. Toyed with the idea a few weeks ago up until I read this post on StackOverflow ( http://serverfault.com/questi…

You could use your own OpenVPN Access Server (https://openvpn.net/index.php/access-server/download-openvpn...).

Configuring an access server isn't extremely difficult (https://openvpn.net/index.php/access-server/docs/quick-start...)

Re: Ask HN: What do you use for remote access?

#39

Post by mynameislegion »

viraptor wrote: post #16
mynameislegion wrote: post #12

Port forwarding, reverse SSH tunnel or Tor onion service. All three for more reliability.

That's not how reliability works. If you use 3 different layers that the traffic needs to pass through, you have 3 different layers that can fail. That means less reliability, not more.

I obviously wasn't suggesting that.

Re: Ask HN: What do you use for remote access?

#40

Post by croon »

stuxnet79 wrote: post #6

I tunnel everything through ssh (both local and remote port forwarding) and in some cases for the exact use-case you have mentioned (web server running on a raspberry pi that is behind a NAT). It works for me. I've never set up a VPN and I'm not too knowledgable about them. Should I set one up? I don't know. Toyed with the idea a few weeks ago up until I read this post on StackOverflow ( http://serverfault.com/questi…

This.

For anyone wondering about specifics, this is at least how I do it.

* Portforward ssh access through your router to any ssh:able machine behind it.

* Connect with (in my case) putty, under settings -> ssh -> tunnels, set up a dynamic forward with a local port.

* Set up your browser to use a socks5 proxy on localhost:[yourchosenport]

* Browse to whatever local address or name your raspberry has behind that NAT.

* BONUS: circumvents any web firewall you're currently behind since you're browsing from home.

Post reply on HN