1

In xrdp.ini, the base install of xrdp on my raspberry pi*, there I have the following below. I changed crypt_level to high.

[globals]
bitmap_cache=yes
bitmap_compression=yes
port=3389
crypt_level=high
channel_code=1

Now, on my own network (with no port forwarded configured on the router) when I access everything over 192.168.1.xx I image it's default settings are sufficient.

However, if one were to install this to a public facing workstation, would (a) this default setting be too low and (b) is there a different, more hardened configuration to consider? If I gave the pi a public facing IP should I consider a different method (VNC over SSH)? Could I pipe RDP over SSH?

The pi is running the following if that makes any difference.

$ uname -a
Linux raspberrypi 4.1.7-v7+ #817 SMP PREEMPT Sat Sep 19 15:32:00 BST 2015 armv7l GNU/Linux

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.