Medium firewall setting is stopping X display for remote clients

chris.hicks · 09-23-2003, 08:24 AM

I am a Linux newbie. I have just installed my system with the 'medium' security setting. I am wanting to run a program on an X client and display the graphics on my X server. It seems that my security setting is stopping this. I do not want to run without a firewall. I would be grateful if somebody could tell me how to customise the firewall so that I can connect successfully to an X client.

Many thanks,
Chris

david_ross · 09-23-2003, 09:19 AM

I would make your own firewall settings so you know what they are doing. Basically:
# Remove old rules
iptables -F
# Drop connections by default
iptables -P INOUT DROP
# Accept X connections
iptables -A INPUT -p tcp --dport 6000 -j ACCEPT
# Accept other connections eg http
iptables -A INPUT -p tcp --dport 80 -j ACCEPT

You may also want to run "xhost" to see the policies for accepting X connections.

chris.hicks · 09-23-2003, 10:43 AM

I have been told another solution that works fine.
Simply ssh onto the client and make sure that the DISPLAY variable is not set in the .cshrc or .login file on the client.