Re: [suse-security] SAS ISSUE
There are some extremely simple things you could do to improve the appreciation of your posting: 1) Never (I do get more and more of those lately) use receipt confirmations. 2) Never use html. 3) Take at least _some_ effort to describe the problem, the configuration and the result of some basic tests you ran. And since I'm at it, some issues not related to this particular posting: 4) Stick to security related issues. 5) Quote what is relevant (what you reply to) and remove the rest.
hi all, a while ago i posted a question on closing port 6000 and 31785. a kind person mailed me off list with the correct answer. Before you flame me for an issue thats been covered on this list note that the addition of -nolisten tcp to the Xservers file (as Roman suggested a while ago) doesn't work on my installation. Anyway I snarfed my box with something I was playing with and require the exact same advice the kind person gave me a few weeks ago to close these two ports. (commenting out the last three lines of some X file ?) It might also be a good idea to post it to the list as I have already received three people mailing me off list asking if I had found a solution and then this can go in the archives in case I or someone else needs it again... tia andre
"andre@do" wrote:
hi all, a while ago i posted a question on closing port 6000 and 31785. a kind person mailed me off list with the correct answer. Before you flame me for an issue thats been covered on this list note that the addition of -nolisten tcp to the Xservers file (as Roman suggested a while ago) doesn't work on my installation.
Do you start X "manually" (i.e. with startx)? If so, you must give '--nolisten tcp' as an argument to startx (IIRC...).
Anyway I snarfed my box with something I was playing with and require the exact same advice the kind person gave me a few weeks ago to close these two ports. (commenting out the last three lines of some X file ?)
That's me, I guess (that's "one of the three things"[TM] I know about kde *and* networking...:-). Just comment the last three lines of /opt/kde/share/services/kxmlrpcd.desktop (or just the "X-KDE-Init..." line). or (don't remember who told me about this, sorry; and I didn't verify since I use the previous solution) put these two lines [General] StartServer=false in /usr/share/config/kxmlrpcdrc.
It might also be a good idea to post it to the list as I have already received three people mailing me off list asking if I had found a solution and then this can go in the archives in case I or someone else needs it again...
Already done in the past... better yet, I would suggest a note in the SuSE Support Knowledgebase and/or in susesecurity.com's FAQ (thanks nix!). regards nicola
nicola moretti wrote:
Do you start X "manually" (i.e. with startx)? If so, you must give '--nolisten tcp' as an argument to startx (IIRC...).
doesn't work...
Anyway I snarfed my box with something I was playing with and require the exact same advice the kind person gave me a few weeks ago to close these two ports. (commenting out the last three lines of some X file ?)
That's me, I guess (that's "one of the three things"[TM] I know about kde *and* networking...:-). Just comment the last three lines of /opt/kde/share/services/kxmlrpcd.desktop (or just the "X-KDE-Init..." line).
or (don't remember who told me about this, sorry; and I didn't verify since I use the previous solution) put these two lines
[General] StartServer=false
in /usr/share/config/kxmlrpcdrc.
NICOLA MORETTI ROCKS !! Thanks Nicola, bye andre
* Peter van den Heuvel (peter@asylum.xs4all.nl) [011209 02:34]:
1) Never (I do get more and more of those lately) use receipt confirmations.
I've been making an effort to strip these annoying things. I just recently added disposition-notification-to but, *gulp*, mispelled 'disposition'. I've currently got: notice-requested-upon-delivery-to disposition-notification-to but if anyone has pointers to a more complete list I'd appreciate it.
2) Never use html.
I guess blocking html mail wasn't enough, we are now stripping text/html as well. -- -ckm
Christopher Mahmood wrote:
* Peter van den Heuvel (peter@asylum.xs4all.nl) [011209 02:34]:
1) Never (I do get more and more of those lately) use receipt confirmations.
I've been making an effort to strip these annoying things. I just recently added disposition-notification-to but, *gulp*, mispelled 'disposition'. I've currently got: notice-requested-upon-delivery-to disposition-notification-to but if anyone has pointers to a more complete list I'd appreciate it.
we did also: /^Disposition-Notification-To:.*/ IGNORE /^Return-Receipt-To:.*/ IGNORE :) HTH -- intraDAT AG http://www.intradat.com Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0 D - 60329 Frankfurt am Main Fax: +49 69-25629-256 Junk mail is war. RFCs do not apply.
participants (5)
-
andre＠do -
Christopher Mahmood -
nicola moretti -
Peter van den Heuvel -
Sven Michels