X11 and -nolisten tcp [Re: How do I shut down this ports (fwd)]
Just a thought..
Is there any reason '-nolisten tcp' is not the default? I haven't tested
but I think the SSH forwards work nonetheless; only if you use $DISPLAY to
direct output to your screen from remote machines you're likely in for
trouble -- but that should not typically be done anyway.
(only reason I can think of are those funky heavy graphics apps folks
claim are too slow over SSH)
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
---------- Forwarded message ----------
Date: Wed, 06 Aug 2003 12:35:09 +0200
From: "shrek-m(a)gmx.de" <shrek-m(a)gmx.de>
Reply-To: rhl-beta-list(a)redhat.com
To: rhl-beta-list(a)redhat.com
Subject: Re: How do I shut down this ports
Michael Kearey wrote:
Louis Garcia wrote:
> 6000/tcp open X11
In case you really must, I found in the man page for Xserver the option :
-nolisten trans-type
disables a transport type. For example, TCP/IP
connections can be disabled with -nolisten tcp.
The consequences of doing so , and where in the X configuration files
you might actually put it, I don't yet know... I have been trying to
find out how to set the option when starting X with xdm/gdm/kdm.
In any case, startx -- -nolisten tcp will do it at commandline and so
far in Severn it's had no adverse impact for me...
you can try or google for ...
debian:
/etc/X/xinit/xserverrc
rhl ? :
/etc/X11/xdm/Xservers
:0 local /usr/X11R6/bin/X -nolisten tcp
/etc/X11/gdm/gdm.conf
[server-Standard]
name=Standard server
command=/usr/X11R6/bin/X -nolisten tcp
flexible=true
/etc/X11/xdm/kdmrc
--
shrek-m
--
Rhl-beta-list mailing list
Rhl-beta-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/rhl-beta-list