xrdp.ini, the base install of xrdp on my raspberry pi*, there I have the following below. I changed
[globals] bitmap_cache=yes bitmap_compression=yes port=3389 crypt_level=high channel_code=1
Now, on my own network (with no port forwarded configured on the router) when I access everything over
192.168.1.xx I image it's default settings are sufficient.
However, if one were to install this to a public facing workstation, would (a) this default setting be too low and (b) is there a different, more hardened configuration to consider? If I gave the pi a public facing IP should I consider a different method (VNC over SSH)? Could I pipe RDP over SSH?
The pi is running the following if that makes any difference.
$ uname -a Linux raspberrypi 4.1.7-v7+ #817 SMP PREEMPT Sat Sep 19 15:32:00 BST 2015 armv7l GNU/Linux