X11 and -nolisten tcp [Re: How do I shut down this ports (fwd)]

[Pekka Savola]

Just a thought..

Is there any reason '-nolisten tcp' is not the default?  I haven't tested 
but I think the SSH forwards work nonetheless; only if you use $DISPLAY to 
direct output to your screen from remote machines you're likely in for 
trouble -- but that should not typically be done anyway.

(only reason I can think of are those funky heavy graphics apps folks 
claim are too slow over SSH)

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
---------- Forwarded message ----------
Date: Wed, 06 Aug 2003 12:35:09 +0200
From: &quot;shrek-m(a)gmx.de&quot; <shrek-m(a)gmx.de&gt;
Reply-To: rhl-beta-list(a)redhat.com
To: rhl-beta-list(a)redhat.com
Subject: Re: How do I shut down this ports

Michael Kearey wrote:

>  Louis Garcia wrote:
>
> > 6000/tcp   open        X11
>
>
>
>  In case you really must, I found in the man page for Xserver the option :
>         -nolisten trans-type
>          disables a transport type.  For example, TCP/IP
>          connections can be disabled with -nolisten tcp.
>
>
>  The consequences of doing so , and where in the X configuration files 
>  you might actually put it, I don't yet know... I have been trying to 
>  find out how to set the option when starting X with xdm/gdm/kdm.
>
>  In any case, startx -- -nolisten tcp will do it at commandline and so 
>  far in Severn it's had no adverse impact for me...  


you can try or google for ...


debian:
/etc/X/xinit/xserverrc

rhl ? :

/etc/X11/xdm/Xservers
:0 local /usr/X11R6/bin/X -nolisten tcp


/etc/X11/gdm/gdm.conf
[server-Standard]
name=Standard server
command=/usr/X11R6/bin/X -nolisten tcp
flexible=true


/etc/X11/xdm/kdmrc


-- 
shrek-m


--
Rhl-beta-list mailing list
Rhl-beta-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/rhl-beta-list