Take the 2-minute tour ×
Raspberry Pi Stack Exchange is a question and answer site for users and developers of hardware and software for Raspberry Pi. It's 100% free, no registration required.

Either from my laptop or my andoid tablet I thought first Port forwarding and the pair of keys for SSH would be good but no avail I lost myself.. Thinking that it's easier I tried also Openvpn but I did not succeed either. Moreover Openvpn seems much for my personal use ? I am looking for an advice Thank you

share|improve this question
add comment

3 Answers 3

OpenSSH is designed to be the most secure way to tunnel into your machine.

When I say tunnel, I mean connect into the console via an encrypted tunnel, where you can also connect using SFTP over port 22, reroute local ports into you machine to make it look as if you were at the machine while surfing somewhere else in the world, redirect X application but in its simplest form, log into the console as root or another user.

It depends what you want to to connect to the raspi? View webpages as if you were inside the LAN? So no port 80 forwarded to the internet? It takes some configuring but look at this tutorial. Basically the client creates a proxy at your local(outside from home) and anything you want to access your remote(the machine at home) goes via the poxy, into the tunnel and get routed on the Pi.

At the least you need to open port 22 to the Pi and it would be recommended to use keys but if you use a good password, that is enough too.

share|improve this answer
add comment

I think setting up VPN may be an overkill. But it also depends on what you want to do. If you let us know what your purpose is, we may be able to help better.

With SSH I am able to do most things I want do remotely on my RPi. Just to expand on ppumkin's answer, here is a quick work flow for you (of course you may already know this but may help others):

  1. Setup SSH on RPi (I recommend changing the default SSH port 22 to something else for security). We will call it ZZZZ.
  2. If you have not already done so, change the username and especially password to something strong. Many RPi distros come with default usernames and passwords.
  3. Restart your RPi.
  4. Setup port forwarding on your router or gateway - direct the SSH port number to Raspberry Pi's internal ip address
  5. If you have a domain name pointed towards your network's external IP you can use that host or use the external IP. Connect through SSH using host (domain or external IP), SSH port number, username and password. On Windows you could use PuTTY. To access files, you could do SFTP through Filezilla.
share|improve this answer
    
Thank you both for your answers It’s helping me a lot My purpose is simple. My Raspi is taking every day a video on a far away site and sending it to me via Dropbox. It’s working well. But I wish to be able from my main place outside through internet to intervene from time to time to change certain parameters and view other snapshots taken by the Raspi. My Raspi would be the server and my laptop and tablet the only clients. I think I don’t need OpenVpn for that. But through SSH changing the port and with strong password as you suggest will it be secure enough? –  user3315730 Apr 7 at 14:25
    
Well the best would be with SSH keys and with a strong passcode too. That in my opinion will give you the strongest protection. But I have had a just a strong password with no keys on my home server for 6 years now without any security issues. –  htpcBeginner Apr 7 at 16:00
add comment

If you want to be paranoid you can have 2 factor authentication using Google Authenticator app.

Read more here http://www.raspberrypi.org/forums/viewtopic.php?f=29&t=61993

Maybe not the simplest way - but I found certificates more difficult.

I can also report that I have detected the scanners are now occasionally using user 'pi' when attempting ssh to my webserver. Unfortunately I cannot change the port number there, but I do block the source IP after two failed attempts.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.