Mailinglist Archive: opensuse-security (511 mails)
| < Previous | Next > |
Re: [suse-security] X-Problem due to firewall
- From: Armin Schöch <armin.schoech@xxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 18 Aug 2001 12:44:12 +0200 (DFT)
- Message-id: <Pine.A41.4.21.0108181239270.15904-100000@xxxxxxxxxxxxxxxxxxxxxx>
Hello Markus !
> Since I'm so paranoic and locked down my whole machine, I have a
> problem now... I installed SuSE Firewall 2 and configured it. Now,
> it's really great, noone getting in at all, BUT:¨At my office I
> use to rsh to a server quite often, and now I don't get the
> X-forwarding to work anymore, since my firewall blocks just about
> everything. Where do I have to change what, to get that up and
> running again?
You should use SSH to login to the server. Then you can use the port
forwarding capability of SSH.
In /etc/ssh_config or /etc/ssh/ssh_config on your machine at
work insert:
ForwardX11 yes
In /etc/sshd_config or /etc/ssh/sshd_config on the server insert:
X11Forwarding yes
X11DisplayOffset 10
(or any other number)
HTH
Bye,
Armin
------------------------------------------------------------------------
Armin Schöch at the office: Institut für Atmosphärenphysik
Ziolkowskistr. 10 / 63 Schlossstraße 6
D-18059 Rostock D-18225 Kühlungsborn
Tel. +49-(0)381-4005781 Tel. +49-(0)38293-68-102
> Since I'm so paranoic and locked down my whole machine, I have a
> problem now... I installed SuSE Firewall 2 and configured it. Now,
> it's really great, noone getting in at all, BUT:¨At my office I
> use to rsh to a server quite often, and now I don't get the
> X-forwarding to work anymore, since my firewall blocks just about
> everything. Where do I have to change what, to get that up and
> running again?
You should use SSH to login to the server. Then you can use the port
forwarding capability of SSH.
In /etc/ssh_config or /etc/ssh/ssh_config on your machine at
work insert:
ForwardX11 yes
In /etc/sshd_config or /etc/ssh/sshd_config on the server insert:
X11Forwarding yes
X11DisplayOffset 10
(or any other number)
HTH
Bye,
Armin
------------------------------------------------------------------------
Armin Schöch at the office: Institut für Atmosphärenphysik
Ziolkowskistr. 10 / 63 Schlossstraße 6
D-18059 Rostock D-18225 Kühlungsborn
Tel. +49-(0)381-4005781 Tel. +49-(0)38293-68-102
| < Previous | Next > |