File:  [NetBSD Developer Wiki] / wikisrc / tutorials / how_to_stop_x11_from_listening_on_port_6000.mdwn
Revision 1.2: download - view: text, annotated - select for diffs
Sun Feb 5 07:14:36 2012 UTC (2 years, 2 months ago) by schmonz
Branches: MAIN
CVS tags: HEAD
dos2unix

By default, the X server listens on port 6000 for incoming connections. If you are directly connected to the internet, or don't trust others connected to your LAN, this could be a potential security risk. 

Disabling this can accomplished one of two ways. The first possible way is to run startx with the -nolisten tcp flag, i.e. 
    
    startx -- -nolisten tcp
    

The more permanent way to do it (globally) is to edit the startx script. It will be located at /usr/X11R6/bin/startx if you installed the base X11, or /usr/pkg/xorg/bin/startx if you installed X.org from pkgsrc. 

Change the serverargs line to look like this: 
    
    serverargs="-nolisten tcp"
    

If you are not the administrator of the system or you like to let free the users to choose their configuration, edit (or create) the ~/.xserverrc file and put this line to it: 
    
    exec X -nolisten tcp
    

  
Restart X, and you're all set! 



CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb