Cygwin provides Unix/Linux services for Windows. For small organisations, those without a dedicated Linux server, Cygwin enables tunneling of less secure services, such as Windows Remote Desktop Connection (RDC) through port 22 (SSH). Crucially, it mitigates the need for exposing insecure ports to the Internet, which compromises security and increases the likelihood of digital intruder attacks.
The following instructions comprise a rough guide:
- Install OpenSSH, and dependent packages, using the Cygwin installation tool (CTRL + click to run)
- Open up a Cygwin terminal
- Prepare the ssh server (daemon) by running:
ssh-host-config -y
- Accept the default ntsec option when prompted:
CYGWIN=
- Right-click My Computer, select -> Manage -> Services and Applications -> Services
- Check that CYGWIN sshd appears in the service list and is started automatically
- Test by running ssh localhost
- Open port 22 in the Windows Firewall (if running XP SP2 or later).
- Forward port 22 on your external firewall/router to port 22 on your local computer
