From owner-freebsd-questions@FreeBSD.ORG Sat Oct 30 17:39:53 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8BB3416A4CE for ; Sat, 30 Oct 2004 17:39:53 +0000 (GMT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id BBC9243D53 for ; Sat, 30 Oct 2004 17:39:52 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) i9UHdYs8077778 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 30 Oct 2004 18:39:35 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)i9UHdYSe077777; Sat, 30 Oct 2004 18:39:34 +0100 (BST) (envelope-from matthew) Date: Sat, 30 Oct 2004 18:39:34 +0100 From: Matthew Seaman To: Gary Aitken Message-ID: <20041030173934.GB97779@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , Gary Aitken , questions@freebsd.org References: <4183C639.1000406@Dreamchaser.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="CdrF4e02JqNVZeln" Content-Disposition: inline In-Reply-To: <4183C639.1000406@Dreamchaser.org> User-Agent: Mutt/1.4.2.1i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.6 (smtp.infracaninophile.co.uk [IPv6:::1]); Sat, 30 Oct 2004 18:39:35 +0100 (BST) X-Virus-Scanned: clamd / ClamAV version devel-20040904, clamav-milter version 0.75l on smtp.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.8 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on happy-idiot-talk.infracaninophile.co.uk cc: questions@freebsd.org Subject: Re: xhost problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Oct 2004 17:39:53 -0000 --CdrF4e02JqNVZeln Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Oct 30, 2004 at 10:50:01AM -0600, Gary Aitken wrote: > I can't get an xterm from another machine to display on my 5.3 system. > I've tried xhost with the ip of the machine I want to allow in, > and finally tried xhost + to allow any machine in, > but attempts to display still fail with "Can't open display w.x.y.z:0.0" >=20 > firewall_enable and ipfilter_enable are NO at the moment, > and the source (xterm) system is open on the internal network. >=20 > What am I missing? Xservers don't listen on the network by default nowadays, because running X across the network in plain is about as bad as using rsh(1), or unencrypted telnet(1). Ideally you should be tunnelling the X session through ssh(1) -- look for the description of the '-X' and '-Y' flags to ssh ('-Y' is only available with more recent versions of ssh(1)), and the 'ForwardX11' command you can use in /etc/ssh/ssh_config or ~/.ssh/config. If you're tunnelling through ssh(1), everything should be setup automatically for you: your $DISPLAY on the remote machine will look like 'localhost:10.0' or 'remote.host.name:10.0' -- don't fiddle with the $DISPLAY setting, or you'll never get the forwarding to work. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --CdrF4e02JqNVZeln Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBg9HWiD657aJF7eIRArqkAJ96tX047yvnyngJKXRRyhvO0BUuUACcDkwP R62ZR3uqbPImCivkjEcZPrA= =5YNp -----END PGP SIGNATURE----- --CdrF4e02JqNVZeln--