Personal vpn

[hameau]

Yeah this is what i am avoiding, having extremely vulnerable ports open to the public.

To connect to my own desktop from outside the LAN, I use VNC over SSH, on a custom port. SSH is set up for public key authentication only (no password access).

For reverse VNC (client support), my open, forwarded ports are only vulnerable when the my vncviewer is running, otherwise there is nothing responding on them (the open ports). My client has to call me for support before I start the vncviewer and I have my vncviewer request approval before establishing the connection. The client's side has no open ports for reverse VNC as the connection is initiated by outbound traffic.