port 6001

nuliknol · 07-07-2012, 03:14 AM

Hi,
I have installed gentoo linux and configured Xvnc. Everything is fine, but I found it listens on port 6001 on every interface:

Code:

tcp        0      0 0.0.0.0:6001            0.0.0.0:*               LISTEN      1921/Xvnc

is this a security problem ?
and, why 6001 and not 6000 ?

rathodsuraj1 · 07-07-2012, 03:51 AM

The vncserver command will startup a VNC server that open 3 next available TCP/IP port, starting from 5801, 5901, and 6001 respectively.
Port 5801 is for VNC client connection over HTTP protocol, port 5901 is for VNC client connection over RFB protocol, and port 6001 is to allows X applications to connect to the VNC server.
By executing vncserver for the second time or execute the vncserver :2 command, this will startup VNC server that bind and listen to port 5802, 5902, and 6002 respectively.
To kill the VNC server in Linux, just execute vncserver -kill :1 will kill the first VNC server that bind and listen to port 5801, 5901, and 6001. The vncserver -kill :2 will kill the second VNC server, and so on.

nuliknol · 07-07-2012, 12:39 PM

thanks, but I still have a question.
Does anyone can remotely login to the port 6001 and see the desktop ?
I have password set for vnc, so , is my setup secure or not?
is there anyway to test this setup doesn't allow remote passwordless logins?

Thanks in advance.

Quote:

Originally Posted by rathodsuraj1

The vncserver command will startup a VNC server that open 3 next available TCP/IP port, starting from 5801, 5901, and 6001 respectively.
Port 5801 is for VNC client connection over HTTP protocol, port 5901 is for VNC client connection over RFB protocol, and port 6001 is to allows X applications to connect to the VNC server.
By executing vncserver for the second time or execute the vncserver :2 command, this will startup VNC server that bind and listen to port 5802, 5902, and 6002 respectively.
To kill the VNC server in Linux, just execute vncserver -kill :1 will kill the first VNC server that bind and listen to port 5801, 5901, and 6001. The vncserver -kill :2 will kill the second VNC server, and so on.

nuliknol · 07-07-2012, 12:47 PM

I have set this DISPLAY:

Code:

[niko@localhost ~]$ export DISPLAY=XX.XX.XX.XX:1.0
[niko@localhost ~]$ xterm
Client is not authorized to connect to Serverxterm Xt error: Can't open display: XX.XX.XX.XX:1.0
[niko@localhost ~]$

(where XX.XX.XX.XX is my server's ip address)

and I get 'not authorized' error. Does this mean despite that 6001 port is open for everybody, it is securely set up. Correct?