LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-31-2004, 11:21 AM   #1
WannaLearnLinux
Member
 
Registered: May 2003
Location: California
Distribution: Slax
Posts: 262

Rep: Reputation: 31
Question how closed 6000/tcp - X in MDK 9.1


Pls can any1 help me how to block X server in MDK 9.1,using Guarddog firewall?

I was searching here and Googled but can't find it.
 
Old 01-31-2004, 11:25 AM   #2
WannaLearnLinux
Member
 
Registered: May 2003
Location: California
Distribution: Slax
Posts: 262

Original Poster
Rep: Reputation: 31
forgot

I'm using Lilo with text login. Init : runlevel 3.
 
Old 01-31-2004, 05:46 PM   #3
frogman
Member
 
Registered: Sep 2003
Distribution: Mandrake, Slack, Debian and PicoBSD
Posts: 181

Rep: Reputation: 31
Assuming you use "startx" to get a gui, you can prevent X listening by editing startx. su to root then, using vi or your favourite editor, open /usr/X11R6/bin/startx

there's a line that says:

Code:
serverargs=""
(or similar - not on linux box at the moment)

change it to read
Code:
serverargs="-nolisten tcp"
You'll need to restart the x-server for it to stop listening (it'll happen next time you reboot if you don't want to faff about).

When you say X is listening, I assume you mean it's listening on the loopback (127.0.0.1 / localhost) rather than your actual network address?

i.e compare: nmap localhost with nmap <my_ip_address>
 
Old 01-31-2004, 11:41 PM   #4
WannaLearnLinux
Member
 
Registered: May 2003
Location: California
Distribution: Slax
Posts: 262

Original Poster
Rep: Reputation: 31
hi

Thanx for reply.
Its X server is on some 0.0.0.0,not the 127.... here is netstat -nlp :

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN -
udp 0 0 0.0.0.0:68 0.0.0.0:* -


I'm working on this port 68 too.But now mostly X.

Should I then stop it or not.Even when it is not 127.0.0.0?What means those zeros?

thanx

Sorry just

 
Old 02-01-2004, 12:19 AM   #5
WannaLearnLinux
Member
 
Registered: May 2003
Location: California
Distribution: Slax
Posts: 262

Original Poster
Rep: Reputation: 31
and netstat -nlp as root

# netstat -nlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 1758/

What means 1758?

Thanx.

Yea Just blocked port 68/udp - DHCP thanx to some threat here
 
Old 02-03-2004, 11:14 PM   #6
WannaLearnLinux
Member
 
Registered: May 2003
Location: California
Distribution: Slax
Posts: 262

Original Poster
Rep: Reputation: 31
Hi frogman

Quote:
Originally posted by frogman
Assuming you use "startx" to get a gui, you can prevent X listening by editing startx. su to root then, using vi or your favourite editor, open /usr/X11R6/bin/startx

there's a line that says:

Code:
serverargs=""
(or similar - not on linux box at the moment)

change it to read
Code:
serverargs="-nolisten tcp"
You'll need to restart the x-server for it to stop listening (it'll happen next time you reboot if you don't want to faff about).

When you say X is listening, I assume you mean it's listening on the loopback (127.0.0.1 / localhost) rather than your actual network address?

i.e compare: nmap localhost with nmap <my_ip_address>
I added with vi as root -nolisten tcp and rebooted,but netstat -nlp as root shows its 6000/tcp listenning at 0.0.0.0

Am I too paranoid about that?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
X11 Using TCP port 6000 AMMullan Linux - Security 4 04-12-2010 05:03 PM
6000/tcp open X11?? yenonn Linux - Networking 11 03-01-2004 12:55 AM
X11 port 6000 - not closed? b0uncer Linux - Security 6 02-23-2004 04:00 PM
Nmap showed 6000/tcp open X11. How do I keep this from starting? jdruin Linux - Security 2 11-22-2003 07:54 AM
close port 6000/tcp 515/tcp SchwipSchwap Linux - Newbie 1 09-12-2002 08:24 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 08:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration