{"repo":"jftuga/gofwd","free":true,"listed":false,"github":"https://github.com/jftuga/gofwd","clone":"git clone https://github.com/jftuga/gofwd.git","description":"A cross-platform TCP port forwarder with Duo 2FA and Geo-IP integration","language":"Go","stars":52,"topics":["duo","forwarding","geoip","golang","command-line"],"license":null,"category":"cli-tools","readme_excerpt":"gofwd Description gofwd is a cross-platform TCP port forwarder with Duo 2FA and Geographic IP integration. Its use case is to help protect services when using a VPN is not possible. Before a connection is forwarded, the remote IP address is geographically checked against city, region (state), and/or country. Distance (in miles) can also be used. If this condition is satisfied, a Duo 2FA request can then be sent to a mobile device. The connection is only forwarded after Duo has verified the user. Stand-alone, single-file executables for Windows, MacOS, and Linux can be downloaded from Releases. Use case The standard Duo 2FA Windows RDP implementation issues the the second factor request after a RDP client has connected and issued a valid username / password combination. The RDP port is always open to the Internet, which is a potential security issue. gofwd uses Duo 2FA before forwarding the RDP connection to an internal system. The big caveat with gofwd is that it only works well in single-user scenarios. However, being able to access your home lab remotely fits in well in this scenario. gofwd can also be used to protect SSH such as an AWS EC2 instance or Digital Ocean Droplet. Using both Remote Desktop to a home computer and remote SSH access work reliably well. On a home network, gofwd can be run on a Raspberry Pi that forwards the connection to a Windows 10 system once Duo authentication is successful. It can also run from within a Docker container for added security. The G","default_branch":null,"files":null,"tree":[],"storefront":"/r/jftuga","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/jftuga/gofwd/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}