Hello all, Like Richard Bos ("activating xdmcp in suse-8.1), I'm also playing with remotely accessing X via xdmcp (kde-3.1, xf86-4.3.0, suse-8.1 on both pc's). I try e.g. "X :1.0 -once -broadcast" in a konsole terminal. With a firewall, I get these in /var/log/messages: Mar 2 23:10:58 cc22149-a kernel: SuSE-FW-ACCESS_DENIED_INT IN=eth1 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx SRC=192.168.0.2 DST=217.121.240.26 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=17 DF PROTO=TCP SPT=1025 DPT=6001 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A0000EDA40000000001030300) The reason is that the packet is sent to 217.121.240.26 (ext ip# on eth0), instead of 192.168.0.1 (int ip# on eth1). Both ip# represent the same pc. Port 6001/tcp is open. The firewall thinks it's being spoofed, and rejects. The routing tables might be usefull: Kernel IP routing table for pc#1 (ip# 217.121.240.26 and 192.168.0.1) Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.0.0 * 255.255.255.0 U 0 0 0 eth1 217.121.240.0 * 255.255.254.0 U 0 0 0 eth0 default r1-lc3-fe0-0-2. 0.0.0.0 UG 0 0 0 eth0 Kernel IP routing table for pc#2 (ip# 192.168.0.2) Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.0.0 * 255.255.255.0 U 0 0 0 eth0 default cc22149-a.priva 0.0.0.0 UG 0 0 0 eth0 Who knows how I can solve this? Cheers, Leen