how to minimize listening ports

johnnydangerous · 02-11-2005, 01:38 AM

thanks, but my point is to make vncserver to be binded to localhost as it's going to be called olny fron there and I don't want it to be (in netstat) *:5900 *:* I wanto to make it if possible localhost:5900, *:*?\

My topic is minimizing listening ports for external interface although iptables are disabling access to them

any ideas are welcome

jschiwal · 02-13-2005, 03:00 AM

Yes, some distro's use different run level numbers. SuSE, Mandrake, and Fedora core use run level 5 for the X windows system. Using 'startx' I believe that the only difference is that you don't run a graphical login manager. This is because the 'kdm', 'xdm' or 'gdm' session manager is started in the inittab itself. I suppose it would be best to check if the vnc service is running after running 'startx'.

johnnydangerous · 02-13-2005, 03:05 AM

the vncserver startup is not a problem the point is how to make it to listen to localhost only?

sigsegv · 02-13-2005, 09:28 AM

Personal pride (or a percieved threat to same) will sidetrack a thread quicker than anything

If you're running VNC >4.x, it has a -localhost option which will only allow it to accept connections from localhost. It also has an -interface option that allows you to specify which interface to bind to. Not sure if older versions have those options or not though.

Being as this is Fedora, you'll probably have to spend an hour digging through the init scripts to find the proper place to set the options though.

johnnydangerous · 02-13-2005, 03:15 PM

I really need those argument in initd any ideas? actually don't know if it can be done as a post gdm process? before user login and will the user binding work that way? is it possible the vnc client not to change the active desktop of another user? any suggestions are really appreciated