<snip>

> "however now due to the increasing number of users I would just like the 
> server to broadcast to the network."
> 
> Maybe I'm misreading this, it is somewhat unclear.

It is: does she mean the X server (client machines) or the servers
that are providing service.

Reading further I *think* that the IPFilter firewall may be
running on the machine that is providing service to the X
terminals. If this *is* the case then she should add rules to
allow the server to receive broadcasts (without "keep state"!)
*and* (if necessary) allow 177/udp *out*. Antony Riley's
explanation of the broadcast XDMCP case is correct and these
additions should allow the broadcast case to work *if it's
all local traffic*. The IP addresses in the original message
imply it probably is local unless there are unusual netmasks.

> > > I have no idea why this would ever work through a router, unless the
> > > router is forwarding network broadcasts (which is generally a bad thing).

The only thing I can think of in this case would be to run
an X chooser on the router.

> > I'd agree in the first case. In the second case it *should*
> > work through a router. A straightforward UDP "keep state"
> > rule shoudl allow the XDMCP packets through. Once the XDMCP
> > negotiation(s) are complete, the server will need to display
> > a login window on the client which is a X11 call from the
> > server to port 6000 on the client.
> 
> The port 6000 stuff is not relavent to the question, as the computers are not 
> appearing on the chooser.

Just completing what needs to be there for the directed cast to work.

> Keep state will not work, if the query is sent to the broadcast address, as 
> the reply will not be from the broadcast address, but from the machine that 
> is replying.

In the broadcast case, I agree. In the unicast case it would (work).

-- 
        David Pick

Reply via email to