From owner-freebsd-stable@freebsd.org  Wed Mar  2 20:40:31 2016
Return-Path: <owner-freebsd-stable@freebsd.org>
Delivered-To: freebsd-stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id D2F83AC1236
 for <freebsd-stable@mailman.ysv.freebsd.org>;
 Wed,  2 Mar 2016 20:40:31 +0000 (UTC)
 (envelope-from bsd-lists@bsdforge.com)
Received: from udns.ultimatedns.net (static-24-113-41-81.wavecable.com
 [24.113.41.81])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id B85D812B5
 for <freebsd-stable@freebsd.org>; Wed,  2 Mar 2016 20:40:30 +0000 (UTC)
 (envelope-from bsd-lists@bsdforge.com)
Received: from ultimatedns.net (localhost [127.0.0.1])
 by udns.ultimatedns.net (8.14.9/8.14.9) with ESMTP id u22KeIF7041115
 for <freebsd-stable@freebsd.org>; Wed, 2 Mar 2016 12:40:24 -0800 (PST)
 (envelope-from bsd-lists@bsdforge.com)
To: "FreeBSD STABLE" <freebsd-stable@freebsd.org>
From: "Chris H" <bsd-lists@bsdforge.com>
Subject: Why must X open TCP by default?
Date: Wed, 02 Mar 2016 12:40:24 -0800
Content-Type: text/plain; charset=UTF-8; format=fixed
MIME-Version: 1.0
Message-id: <e703d257971642a10c95ef53dc9ea4f4@ultimatedns.net>
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-stable>, 
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Mar 2016 20:40:31 -0000

Hello,
 This is regarding 9-STABLE. All of the 9-STABLE boxes
that have Xorg installed, and running on them, insist on
opening TCP port 6000; as reported by sockstat(1)

Xorg       1295  1  tcp6   *:6000                *:*
Xorg       1295  3  tcp4   *:6000                *:*

I see that the (current(ish)) documentation indicates
that this option is off, by default, and can be enabled
by passing -listen_tcp to startx(1). This seems to hold
true, as all of my -CURRENT boxes do not show port 6000
as being open while X is running. So my question is;
how can I prevent X from opening tcp ports?
I attempted;
startx -nolisten tcp
startx -nolisten_tcp
but no joy. Is there an option available for xorg.conf(5)?
Maybe like
    DisableTCP true
or
    Option "DisableTCP" "true"
I couldn't find any hints in the man pages.
Anyway, any input greatly appreciated.

Thanks!

--Chris