LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 05-10-2008, 01:58 AM   #1
xiaoje
LQ Newbie
 
Registered: May 2008
Posts: 1

Rep: Reputation: 0
About X and TCP 6000


Guys I'm pretty much new to Linux though I would like to ask a few questions could anyone give me at least brief or rather a simple know about
1. X-Window
2. TCP 6000

I've read various issues regarding security when they are open.

-How do I disable X-Window and how to close TCP Port 6000? Could you give me a simple step by step? Thanks in advance.
 
Old 05-10-2008, 09:38 AM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
By default ports in the 6000 range typically aren't "listening" so you shouldn't need to close it. The command to allow for displaying from other locations to your local workstation is xhost - unless you've done something like "xhost +" you're not allowing connections back to your server.

However, one could set DISPLAY variable equal to a remote machine's IP and have the X-Window display there and that would open a port in the 6000 range between your host and that remote machine. You could explicitly prevent this in your iptables configuration (type "man iptables" for more detail on its configuration). Iptables is a firewall built into Linux.

You CAN do secure X-Windows by using ssh X tunneling. In essence the X-Window goes through through your ssh session so the traffic is encrypted. To allow that you'd have to insure you do NOT prohibit the 6000 range on "localhost" (127.0.0.1) if you decided to prohibit it in Iptables. That is you'd prohbit only on your NIC IPs.

See the -x and -X options of ssh in the ssh man page for more information on the tunnels.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
X11 Using TCP port 6000 AMMullan Linux - Security 4 04-12-2010 05:03 PM
OpenSuse 10 - X server doesn't appear to listen on tcp:6000 The MCP SUSE / openSUSE 5 04-05-2006 12:11 PM
6000/tcp open X11?? yenonn Linux - Networking 11 03-01-2004 12:55 AM
how closed 6000/tcp - X in MDK 9.1 WannaLearnLinux Linux - Networking 5 02-03-2004 11:14 PM
close port 6000/tcp 515/tcp SchwipSchwap Linux - Newbie 1 09-12-2002 08:24 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration