From owner-freebsd-questions@FreeBSD.ORG Tue Jun 26 05:48:15 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id ADD101065670 for ; Tue, 26 Jun 2012 05:48:15 +0000 (UTC) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Received: from wojtek.tensor.gdynia.pl (wojtek.tensor.gdynia.pl [89.206.35.99]) by mx1.freebsd.org (Postfix) with ESMTP id 190888FC0C for ; Tue, 26 Jun 2012 05:48:14 +0000 (UTC) Received: from wojtek.tensor.gdynia.pl (localhost [127.0.0.1]) by wojtek.tensor.gdynia.pl (8.14.5/8.14.5) with ESMTP id q5Q5mAgc003494; Tue, 26 Jun 2012 07:48:10 +0200 (CEST) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Received: from localhost (wojtek@localhost) by wojtek.tensor.gdynia.pl (8.14.5/8.14.5/Submit) with ESMTP id q5Q5mAhI003491; Tue, 26 Jun 2012 07:48:10 +0200 (CEST) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Date: Tue, 26 Jun 2012 07:48:10 +0200 (CEST) From: Wojciech Puchar To: Walter Hurry In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.7 (wojtek.tensor.gdynia.pl [127.0.0.1]); Tue, 26 Jun 2012 07:48:11 +0200 (CEST) Cc: freebsd-questions@freebsd.org Subject: Re: Xorg listening on the WAN? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jun 2012 05:48:15 -0000 Xorg -nolisten tcp to disable at all to disable wan only use firewall On Mon, 25 Jun 2012, Walter Hurry wrote: > FreeBSD 9.0-RELEASE > > I think Xorg is listening on external addresses: > > $ sockstat -46 |grep Xorg > root Xorg 1573 1 tcp6 *:6000 *:* > root Xorg 1573 3 tcp4 *:6000 *:* > $ netstat -a|grep x11 > tcp4 0 0 *.x11 *.* LISTEN > tcp6 0 0 *.x11 *.* LISTEN > > I'm new to FreeBSD, but if I interpret this correctly, x11 is listening > for connections on port 6000 for connections from any IPv4 or IPv6 > address. > > I don't think I'm in any immediate danger, as I am behind a router which > will block incoming connection attempts, which (virtually) all seem to be > on the http port (80) anyway. > > But it would give me a warm fuzzy feeling to stop x11 listening > externally at all - I don't think I need it. How can I go about that > please? > > In case it makes a difference, I am using XDM with standard LXDE. I do > not use startx to initiate my sessions. > > Thanks. > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >