From owner-freebsd-stable@freebsd.org  Wed Mar  2 20:56:49 2016
Return-Path: <owner-freebsd-stable@freebsd.org>
Delivered-To: freebsd-stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3A11FAC1E09
 for <freebsd-stable@mailman.ysv.freebsd.org>;
 Wed,  2 Mar 2016 20:56:49 +0000 (UTC)
 (envelope-from bsd-lists@bsdforge.com)
Received: from udns.ultimatedns.net (static-24-113-41-81.wavecable.com
 [24.113.41.81])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 1F00A174D
 for <freebsd-stable@freebsd.org>; Wed,  2 Mar 2016 20:56:48 +0000 (UTC)
 (envelope-from bsd-lists@bsdforge.com)
Received: from ultimatedns.net (localhost [127.0.0.1])
 by udns.ultimatedns.net (8.14.9/8.14.9) with ESMTP id u22Kugx0043561
 for <freebsd-stable@freebsd.org>; Wed, 2 Mar 2016 12:56:48 -0800 (PST)
 (envelope-from bsd-lists@bsdforge.com)
To: <freebsd-stable@freebsd.org>
In-Reply-To: <CAOjFWZ4q=AKxuA_RH_KCGz4wrTTcMr+_VVjYxbZ6ayQTN1pfxQ@mail.gmail.com>
References: <e703d257971642a10c95ef53dc9ea4f4@ultimatedns.net>,
 <CAOjFWZ4q=AKxuA_RH_KCGz4wrTTcMr+_VVjYxbZ6ayQTN1pfxQ@mail.gmail.com>
From: "Chris H" <bsd-lists@bsdforge.com>
Subject: Re: Why must X open TCP by default?
Date: Wed, 02 Mar 2016 12:56:48 -0800
Content-Type: text/plain; charset=UTF-8; format=fixed
MIME-Version: 1.0
Message-id: <38daa5ebf8d9d06b5595ff8da54cc18c@ultimatedns.net>
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-stable>, 
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Mar 2016 20:56:49 -0000

On Wed, 2 Mar 2016 12:44:18 -0800 Freddie Cash <fjwcash@gmail.com> wrote

> On Wed, Mar 2, 2016 at 12:40 PM, Chris H <bsd-lists@bsdforge.com> wrote:
> 
> > Hello,
> >  This is regarding 9-STABLE. All of the 9-STABLE boxes
> > that have Xorg installed, and running on them, insist on
> > opening TCP port 6000; as reported by sockstat(1)
> >
> > Xorg       1295  1  tcp6   *:6000                *:*
> > Xorg       1295  3  tcp4   *:6000                *:*
> >
> > I see that the (current(ish)) documentation indicates
> > that this option is off, by default, and can be enabled
> > by passing -listen_tcp to startx(1). This seems to hold
> > true, as all of my -CURRENT boxes do not show port 6000
> > as being open while X is running. So my question is;
> > how can I prevent X from opening tcp ports?
> > I attempted;
> > startx -nolisten tcp
> >
> 
> ​Does the following work (note the extra -- in the command)?​
> 
> ​startx -- -nolisten tcp​
Hello, Freddie.
Good catch, by both you, and Brandon. I just tried it. But
sockstat(1) still reports 6000 being open. Closing the X
server, and session, reveal that 6000 is no longer open.
Bummer.

Thanks to both of you for the fast, and informative reply!

--Chris