]> Tw33Ty's blog http://www.eglug.org/blog/4 en Security Tip http://www.eglug.org/node/60 <p class="left2right"> Tip of the week </p> <p class="left2right"> StartX by default listens on port 6000, to see this you can type at a terminal: </p> <p class="left2right"> netstat -an </p> <p class="left2right"> This is not considered secure, or good linux practice to leave it listening for connections, since this can be exploited and leave you vulnerable. To close the connection, and make X a more secure place change to the directory where startx is at: </p> <p class="left2right"> cd /usr/X11R6/bin/ </p> <p class="left2right"> With your editor open startx, and look for the following line: </p> <p class="left2right"> serverargs=" " </p> <p class="left2right"> Change the line now to reflect this: </p> <p class="left2right"> serverargs="-nolisten tcp" </p> <p class="left2right"> Be sure you don't forget to add the dash ---&gt; - in front of 'nolisten tcp' Now save and close startx, log off Xwindows your desktop, and log back in, then run 'netstat -an' and you will now see that 6000 has been closed and is not there anymore </p> Thu, 3 Jun 2004 16:36:28 +0000