Hi List,

Our "X2Go: The Gathering 2019" participant Martti Pitkanen tried
something out that I sadly couldn't try on my last flight with Finnair,
due to some technical difficulties with the satellite uplink:

Starting an X2Go Desktop Session with a server on the ground while in

And he even managed to record a video of it!

Watch this: <https://www.youtube.com/watch?v=TlqVS60DNgQ&feature=youtu.be>

The really impressive feat is that Martti is using the "browsing"
internet package Finnair offers - which is marketed as "only good for
Web browsing and E-Mail", rather than the more expensive "streaming"

Finnair says they block streaming and VPN access on the "browsing"
package, but - SSH works, and thus X2Go works as well.  As you can see
in Martti's video, the speed with which the screen gets updated is
totally okay, too (especially considering that he is using Chrome
Browser in the remote session, which isn't exactly fast over X2Go, even
on a wired connection).

This is a big advantage for Linux and X2Go compared to an RDP connection
to a Windows machine - we don't need a separate VPN connection to make
things safe (we can simply use 2FA via PAM, or an SSH keyfile +
passphrase), so we're - allow me the pun - flying under Finnair's radar
for VPN connections, and the small internet package is sufficient for X2Go.

By the way, should Finnair choose to block SSH in the future, there are
probably some ways around that as well.

The easiest one is to switch the SSH port from 22 to 443 - if they're
only blacklisting/whitelisting ports. 443 is https, and cheap
firewall/proxy settings usually allow direct connections to that port
without further inspection or MitM-proxying.

The more complicated one would be running a web proxy on your remote
machine that listens to outside connections on Port 443, but only allows
CONNECT type requests to localhost on port 22 (and blocks everything
else).  Then you'd set up X2GoClient to use that web proxy in the
session configuration.  That way, the traffic should look like
http/https traffic to any packet-inspecting firewall.

Kind Regards,
Stefan Baur

BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
x2go-project mailing list

Reply via email to