RDP Zero Trust

Zero Trust Access
1

Has anybody be able to setup an RDP connection trough the Cloudflare Tunnel using the public network?

Ive followed the instructions step by step but cant get it working.

This is the error that I;m getting, any help will be appreciated

2023-04-01T10:21:49Z ERR Error on Websocket listener error=“failed to start forwarding server: listen tcp 127.0.0.1:3389: bind: An attempt was made to access a socket in a way forbidden by its access permissions.”
failed to start forwarding server: listen tcp 127.0.0.1:3389: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

2

I assume you are following this guide: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/use_cases/rdp/#connect-to-rdp-server-with-cloudflared-access ?

Have you tried using a different local port for starting the cloudflared service on your client device?
It’s possible that you already have something bound to that port especially if it’s Windows.

3

That,s right, that the guide I have been using but something missing there,
I’m using a different port because the 3389 is already in used but still cannot establish the rdp session.

“C:\Users\roger\Desktop>cloudflared access rdp --hostname xxxxxx --url rdp://localhost:4389
2023-04-02T06:44:09Z INF Start Websocket listener host=localhost:4389”

4

this is the error that Im getting on the client

C:\Users\Administrator>cloudflared access rdp --hostname xxxxx --url rdp://localhost:4389
2023-04-02T08:42:26Z INF Start Websocket listener host=localhost:4389
2023-04-02T08:43:18Z ERR failed to connect to origin error=“dial tcp: lookup xxxwxx: no such host” originURL=xxxxxx

5

This sounds like a dns/lookup issue, can you try to dig +noall +answer <your_host> to see if your client’s network is being able to resolve the DNS?

6

Thanks metal,

It was actually a DNS issue.

“Rookie Mistake”

Thanks again mate…

1 Like
7

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.