Take Two!
here is the script I use to start the Xwindow system,
without X listening for incoming tcp connections.
#!/bin/sh
#
# /usr/X11R6/bin/runX-no-listen
# a simple script wrapper to start the X11 server
# without listening for tcp connections.
# last updated 2003-08-13
startx -- -nolisten tcp
# end of wrapper
works ok for me under SuSE 8.1 pro
HTH
Keith Roberts
---------- Forwarded message ----------
To: david
I dont want to filter the port, I want to close it i dont understand why i easly can close port 6000 on slackware and mandrake but suse just cant
On Tuesday 20 January 2004 9:03 am, Philippe Vogel wrote:
david wrote:
is there another configuration file to close this port ?
/etc/opt/kde3/share/config/kdm
This may/should be a link (or /opt/... should be)
With yast you can configure there is no remote access to X.
If you want to have ports not closed but in steath mode you will have to patch iptables with the grsecurity iptables-patch (you will need kernel sources as well). This patch implements steathmode for filtering (afaik this will even not work with ack-packets scans).
Philippe
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here