tcp 6000 X11 open on my box

[J-Tek]

Hi,

What is tcp port 6000 for? Why is it open on my box. should I throw it behind firewall?

thanx

[evilcartman]

You like X-Windowing System dont you? :) X System uses a server on TCP 6000 so its a window emulator ;-)

So X server uses that port nothing dangerous....

[7]

I'm no security guru, but I'm pretty sure on this one.

On my debian 3.0 system X is always started as /usr/bin/X11/X -dpi 100 -nolisten tcp to tell it not to listen on port 6000. X is designed so that clients can connect over a network.

If you've got an xserver listening on port 6000, then others can connect, depending on what sort of user access controls you've got set up.

Play it safe. Block it at your firewall.

[ 28 December 2001: Message edited by: 7 ]

[bdl]

Originally posted by Kernel_Compiler:
<STRONG>
So X server uses that port nothing dangerous....</STRONG>

Sorry to say, but having your X server ports open is a big no-no. You can either block them with something like IPCHAINS or IPTABLES (basic firewall that blocks the 6000 series ports) or you can run it as 7 suggested with the -nolisten tcp option.

Linkage:
http://help.watchguard.com/lss/45/Handbook/beyond_4.htm

[evilcartman]

wow!