Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Feb 2002 18:01:18 -0600
From:      "Mike Meyer" <mwm-dated-1014768078.678dfe@mired.org>
To:        "Scott M. Nolde" <scott@smnolde.com>
Cc:        questions@freebsd.org, Manuel.Hendel@easygolucky.de
Subject:   Re: securing open ports 515(printer) and 6000(X11)??
Message-ID:  <15477.35406.375828.941200@guru.mired.org>
In-Reply-To: <88411587@toto.iv>

next in thread | previous in thread | raw e-mail | index | archive | help
Scott M. Nolde <scott@smnolde.com> types:
> Perhaps if you export DISPLAY=localhost:0.0 then X will only listed to it
> on the localhost interface.

Nope. The correct answer "-nolisten tcp" has already been given. That
flag needs to be passed to the server. If it is, then you can't
connect to localhost:0.0, but only to :0.0.

For xdm - which is what I believe Manuel is using - the file
/usr/X11R6/lib/X11/xdm/Xservers needs to be changed to start X with
this line:

	:0 local /usr/X11R6/bin/X -nolisten tcp

I haven't tested it, as I don't use XDM, but it ought to work.

	<mike

--
Mike Meyer <mwm@mired.org>			http://www.mired.org/home/mwm/
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15477.35406.375828.941200>