Gnome Remote Desktop -- Allow over Ethernet and block over WiFi?

Click For Summary
SUMMARY

GNOME Remote Desktop can be configured to allow connections over the Ethernet interface while blocking access over WiFi by implementing specific firewall rules. The configuration file for GNOME Remote Desktop is located at ~/.config/gnome-remote-desktop, typically containing files like server.conf. To enforce network access, users can utilize tools such as ufw or iptables to manage traffic on the Ethernet (eth0) and WiFi (wlan0) interfaces. After applying these changes, it is essential to restart the GNOME Remote Desktop service using the command systemctl --user restart gnome-remote-desktop.

PREREQUISITES
  • Familiarity with GNOME Remote Desktop and its configuration files
  • Basic understanding of firewall management using ufw or iptables
  • Knowledge of network interfaces, specifically Ethernet (eth0) and WiFi (wlan0)
  • Experience with Linux command line operations
NEXT STEPS
  • Research how to configure firewall rules using ufw for network interface management
  • Learn about iptables commands for advanced firewall configurations
  • Explore GNOME Remote Desktop settings and options for enhanced security
  • Investigate network interface binding techniques for applications on Linux
USEFUL FOR

This discussion is beneficial for system administrators, network engineers, and users seeking to enhance the security of GNOME Remote Desktop by controlling access based on network interfaces.

Swamp Thing
Insights Author
Messages
1,047
Reaction score
785
Is it possible to configure Gnome Remote Desktop to share the desktop over the Ethernet interface but block connections over WiFi? Where is the config file for this daemon?
 
Computer science news on Phys.org
You can try these steps:

Yes, it is possible to configure GNOME Remote Deskto by controlling access at the network level using firewall rules or configuring GNOME Remote Desktop to bind specifically to the Ethernet interface.

NOTE: I've never attempted this.

Find the GNOME Remote Desktop Service Configuration File:

GNOME Remote Desktop is managed by gnome-remote-desktop. Its configuration is typically stored in:

Bash:
~/.config/gnome-remote-desktop

You may find files such as server.conf or similar. However, these files do not typically allow interface-specific configurations.

Configure Firewall Rules:

To limit access to Ethernet:

Bash:
ip link

Typically, Ethernet is eth0 or similar, and WiFi is wlan0.

Use ufw (Uncomplicated Firewall) or iptables to allow traffic only on the Ethernet interface. For example:

Bash:
sudo ufw allow in on eth0

sudo ufw deny in on wlan0

Or, using iptables:

Bash:
sudo iptables -A INPUT -i eth0 -p tcp --dport 3389 -j ACCEPT

sudo iptables -A INPUT -i wlan0 -p tcp --dport 3389 -j DROP

Replace 3389 with the port GNOME Remote Desktop is configured to use (commonly used for RDP or VNC).

Restart GNOME Remote Desktop:

After making changes, restart the GNOME Remote Desktop service:

Bash:
systemctl --user restart gnome-remote-desktop
 
  • Informative
Likes   Reactions: FactChecker, Swamp Thing and berkeman

Similar threads

  • · Replies 8 ·
Replies
8
Views
3K
Replies
1
Views
3K
  • · Replies 1 ·
Replies
1
Views
5K
  • · Replies 3 ·
Replies
3
Views
4K
  • · Replies 15 ·
Replies
15
Views
2K
  • · Replies 17 ·
Replies
17
Views
5K
  • · Replies 13 ·
Replies
13
Views
4K
  • · Replies 2 ·
Replies
2
Views
3K
  • · Replies 2 ·
Replies
2
Views
10K