On Mon, 11 Sep 2000, you wrote:
> Since the foreign address is 0.0.0.0, does that mean that these
> ports are accessable by the world?  Port 515 is the print
> spooler, so it sounds bad that that should be world accessable.

You'd better believe it.  And if you want it to get worse, open an X
Window session and watch X pop up on port 6000 and xfs on port 2046 I
think.  This is why EVERYONE running a linux box (at home or otherwise)
needs to have a firewall installed of some sort.  One solution is
tcpserver as a replacement for inet super server because it supports
binding to a specific interface or address.  It is limited in the fact
that it only handles TCP protocols.  

As far as X and xfs go ... pass the -nolisten tcp to your startx script as
a server arg and X will no longer listen on the network for connections. 
xfs will take -udpPort 0 to to turn off network requests, but I still
haven't found a good place in prefdm or the like to pass that arg
automatically.  If anyone has any tips please post them.

-- 
Matthew Micene
Systems Development Manager
Express Search Inc.
www.ExpressSearch.com
____________________________
A host is a host from coast to coast,
and no one will talk to a host too close
Unless the host that isn't close is busy, hung or dead

Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.

Reply via email to