[suse-security] X-Problem due to firewall
Hi! Since I'm so paranoic and locked down my whole machine, I have a problem now... I installed SuSE Firewall 2 and configured it. Now, it's really great, noone getting in at all, BUT:¨At my office I use to rsh to a server quite often, and now I don't get the X-forwarding to work anymore, since my firewall blocks just about everything. Where do I have to change what, to get that up and running again? TIA markus
Hello Markus !
Since I'm so paranoic and locked down my whole machine, I have a problem now... I installed SuSE Firewall 2 and configured it. Now, it's really great, noone getting in at all, BUT:¨At my office I use to rsh to a server quite often, and now I don't get the X-forwarding to work anymore, since my firewall blocks just about everything. Where do I have to change what, to get that up and running again?
You should use SSH to login to the server. Then you can use the port forwarding capability of SSH. In /etc/ssh_config or /etc/ssh/ssh_config on your machine at work insert: ForwardX11 yes In /etc/sshd_config or /etc/ssh/sshd_config on the server insert: X11Forwarding yes X11DisplayOffset 10 (or any other number) HTH Bye, Armin ------------------------------------------------------------------------ Armin Schöch at the office: Institut für Atmosphärenphysik Ziolkowskistr. 10 / 63 Schlossstraße 6 D-18059 Rostock D-18225 Kühlungsborn Tel. +49-(0)381-4005781 Tel. +49-(0)38293-68-102
Hi Markus!
Since I'm so paranoic and locked down my whole machine, I have a problem now... I installed SuSE Firewall 2 and configured it. Now, it's really great, noone getting in at all, BUT:�At my office I use to rsh to a server quite often, and now I don't get the X-forwarding to work anymore, since my firewall blocks just about everything. Where do I have to change what, to get that up and running again?
If you really insist on using rsh, open port 6000 in your firewall-config: that's the one X uses. Better, however is to leave your firewall untouched and use ssh instead of rsh: ssh -X server will enable X-forwarding. Or edit /etc/ssh/ssh_config on your workstation to contain the line ForwardX11 yes If the server is running SuSE 7.2, it's /etc/ssh/sshd_config is already configured properly. If you're runnign another OS, you might have to add these lines: X11Forwarding yes X11DisplayOffset 10 Cheers, Yuri.
participants (3)
-
Armin Schöch -
Markus Kohli -
Yuri Robbers