Mailinglist Archive: opensuse-security (570 mails)

[Keith Roberts <lists@xxxxxxxxxxxxxxxxx>]

Take Two!

here is the script I use to start the Xwindow system,
without X listening for incoming tcp connections.

#!/bin/sh
#
# /usr/X11R6/bin/runX-no-listen

# a simple script wrapper to start the X11 server
# without listening for tcp connections.

# last updated 2003-08-13

startx -- -nolisten tcp

# end of wrapper

works ok for me under SuSE 8.1 pro

HTH

Keith Roberts

---------- Forwarded message ----------
To: david <david@xxxxxxxxxxxxxxxxxx>
From: Lindomar Santos <lindomar@xxxxxxxxxxxxx>
Subject: Re: [suse-security] closing port 6000

Hi David,

You have to edit /etc/opt/kde3/share/config/kdm/Xservers

:0 local /usr/X11R6/bin/X :0 vt07 -nolisten tcp


ps: In suse box 8.2


      __|__                By Lindomar,
o---*--(*)--*---o          http://wecanstopspam.org

On Tue, 20 Jan 2004, david wrote:

> I dont want to filter the port, I want to close it
> i dont understand why i easly can close port 6000 on slackware and mandrake
> but suse just cant
>
>
> On Tuesday 20 January 2004 9:03 am, Philippe Vogel wrote:
> > > david wrote:
> > > > is there another configuration file to close this port ?
> > >
> > > /etc/opt/kde3/share/config/kdm
> > >
> > > This may/should be a link (or /opt/... should be)
> >
> > With yast you can configure there is no remote access to X.
> >
> > If you want to have ports not closed but in steath mode you will have to
> > patch iptables with the grsecurity iptables-patch (you will need kernel
> > sources as well).
> > This patch implements steathmode for filtering (afaik this will even not
> > work with ack-packets scans).
> >
> > Philippe
>
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-help@xxxxxxxx
> Security-related bug reports go to security@xxxxxxx, not here
>
>

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here