I am new to linux migrating from windows. I have managed to close all listening ports except port 6000. I could use some help with securing my computer. i have goggled allot of information but have not been able to find a solution please help. I am running mandrake 10

You can use iptables

iptables -A INPUT -p tcp --dport 6000 -j DROP

I'm afraid you will should to recompile your kernel to use iptables
or simply try to

modprobe ip_conntrack
modprobe ip_tables

hmm :>

isn't there a away to simply terminate the process that is opening the port or keeping it from loading up at boot I'm new the linux and recompiling the kernel is not something i want to try(not yet). kde process table list the command as /etc/X11/X. i use a cable modem and having a open port on as OS i know nothing about is asking for trouble after i iptables -A INPUT -p TCP -s 0/0 --destination-port 6000 -j DROP netstat still list the port as open thanks in advance

It should be used by X, if you use startx for your X session you can add "-nolisten tcp" to "defaultserverflags" in /usr/X11R6/bin/startx
If you use a DM you should be able to modify X server settings in the config file.

Port 6000 is X11 or X Window Server. If you stop X Window Server, you can not use any GUI programs. I do not think you are yet comfortable using command line. You will not hurt X Window Server if you block the port from incomming traffic.

Using something like IPTABLES is good to block ports. You can type "iptables -A INPUT -p tcp --dport 6000 -j DROP" or use a program like Firestarter to help you setup iptables. Firestarter is easy to setup. Firestarter just makes a script that loads a few files that you can edit. Everytime you boot up your computer, you can have it run the firestarter script.

Under Mandrake you can use drakconf (System->Configuration->Configure your computer) to configure X not to listen to port 6000. Once you start up drakconf the setting you need to change is under Security->Level and checks in the Systems Options tab. The two settings of use there are "Allow X Window connections" and "Authorize TCP connections to X Window". Change them to "NONE" and "no" respectively.

The part above that stops the X server from listening to tcp port 6000 changes /etc/X11/xdm/Xservers. You could do the same yourself by editing /etc/X11/xdm/Xservers and changing to add "-nolisten tcp" to each configured display so the end would look something like:

<CODE>
:0 local /usr/X11R6/bin/X -deferglyphs 16 -nolisten tcp
:1 local reserve /usr/X11R6/bin/X :1 vt8 -deferglyphs 16 -nolisten tcp
:2 local reserve /usr/X11R6/bin/X :2 vt9 -deferglyphs 16 -nolisten tcp
:3 local reserve /usr/X11R6/bin/X :3 vt10 -deferglyphs 16 -nolisten tcp
:4 local reserve /usr/X11R6/bin/X :4 vt11 -deferglyphs 16 -nolisten tcp
:5 local reserve /usr/X11R6/bin/X :5 vt12 -deferglyphs 16 -nolisten tcp
</CODE>

Next time you start X it won't be listening to the tcp port.

Thanks to all of you! It was browsing through this form that helped me to make my final decision about trying linux. I was honestly shocked to find so many people willing to help out us newbies. I cant say thanks enough