Change Default X11 Forwarding Port

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.







share|improve this question



















  • It is listening on localhost only by default.
    – Ipor Sircer
    Jun 13 at 13:13










  • Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
    – Katya Veselnitskaya
    Jun 13 at 13:35











  • Because you've set other than default options or something else is listening not sshd.
    – Ipor Sircer
    Jun 13 at 13:40










  • What OS are you using?
    – ctrl-alt-delor
    Jun 13 at 14:23










  • It is Debian Jessie Lite
    – Katya Veselnitskaya
    Jun 13 at 15:33














up vote
0
down vote

favorite












I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.







share|improve this question



















  • It is listening on localhost only by default.
    – Ipor Sircer
    Jun 13 at 13:13










  • Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
    – Katya Veselnitskaya
    Jun 13 at 13:35











  • Because you've set other than default options or something else is listening not sshd.
    – Ipor Sircer
    Jun 13 at 13:40










  • What OS are you using?
    – ctrl-alt-delor
    Jun 13 at 14:23










  • It is Debian Jessie Lite
    – Katya Veselnitskaya
    Jun 13 at 15:33












up vote
0
down vote

favorite









up vote
0
down vote

favorite











I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.







share|improve this question











I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.









share|improve this question










share|improve this question




share|improve this question









asked Jun 13 at 12:59









Katya Veselnitskaya

33




33











  • It is listening on localhost only by default.
    – Ipor Sircer
    Jun 13 at 13:13










  • Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
    – Katya Veselnitskaya
    Jun 13 at 13:35











  • Because you've set other than default options or something else is listening not sshd.
    – Ipor Sircer
    Jun 13 at 13:40










  • What OS are you using?
    – ctrl-alt-delor
    Jun 13 at 14:23










  • It is Debian Jessie Lite
    – Katya Veselnitskaya
    Jun 13 at 15:33
















  • It is listening on localhost only by default.
    – Ipor Sircer
    Jun 13 at 13:13










  • Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
    – Katya Veselnitskaya
    Jun 13 at 13:35











  • Because you've set other than default options or something else is listening not sshd.
    – Ipor Sircer
    Jun 13 at 13:40










  • What OS are you using?
    – ctrl-alt-delor
    Jun 13 at 14:23










  • It is Debian Jessie Lite
    – Katya Veselnitskaya
    Jun 13 at 15:33















It is listening on localhost only by default.
– Ipor Sircer
Jun 13 at 13:13




It is listening on localhost only by default.
– Ipor Sircer
Jun 13 at 13:13












Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
– Katya Veselnitskaya
Jun 13 at 13:35





Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR>
– Katya Veselnitskaya
Jun 13 at 13:35













Because you've set other than default options or something else is listening not sshd.
– Ipor Sircer
Jun 13 at 13:40




Because you've set other than default options or something else is listening not sshd.
– Ipor Sircer
Jun 13 at 13:40












What OS are you using?
– ctrl-alt-delor
Jun 13 at 14:23




What OS are you using?
– ctrl-alt-delor
Jun 13 at 14:23












It is Debian Jessie Lite
– Katya Veselnitskaya
Jun 13 at 15:33




It is Debian Jessie Lite
– Katya Veselnitskaya
Jun 13 at 15:33










1 Answer
1






active

oldest

votes

















up vote
0
down vote



accepted










X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.



Then ssh can be used to connect to a remote machine, with ssh -X.






share|improve this answer





















  • If it is only allowing local access, then why can I see the port listening from another machine?
    – Katya Veselnitskaya
    Jun 13 at 15:35










  • Yes, set your firewall to block it. And look at the X11 configuration.
    – ctrl-alt-delor
    Jun 13 at 15:56










  • Yes thank you, I have it working now. :)
    – Katya Veselnitskaya
    Jun 13 at 16:03











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);








 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f449542%2fchange-default-x11-forwarding-port%23new-answer', 'question_page');

);

Post as a guest






























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
0
down vote



accepted










X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.



Then ssh can be used to connect to a remote machine, with ssh -X.






share|improve this answer





















  • If it is only allowing local access, then why can I see the port listening from another machine?
    – Katya Veselnitskaya
    Jun 13 at 15:35










  • Yes, set your firewall to block it. And look at the X11 configuration.
    – ctrl-alt-delor
    Jun 13 at 15:56










  • Yes thank you, I have it working now. :)
    – Katya Veselnitskaya
    Jun 13 at 16:03















up vote
0
down vote



accepted










X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.



Then ssh can be used to connect to a remote machine, with ssh -X.






share|improve this answer





















  • If it is only allowing local access, then why can I see the port listening from another machine?
    – Katya Veselnitskaya
    Jun 13 at 15:35










  • Yes, set your firewall to block it. And look at the X11 configuration.
    – ctrl-alt-delor
    Jun 13 at 15:56










  • Yes thank you, I have it working now. :)
    – Katya Veselnitskaya
    Jun 13 at 16:03













up vote
0
down vote



accepted







up vote
0
down vote



accepted






X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.



Then ssh can be used to connect to a remote machine, with ssh -X.






share|improve this answer













X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.



Then ssh can be used to connect to a remote machine, with ssh -X.







share|improve this answer













share|improve this answer



share|improve this answer











answered Jun 13 at 14:25









ctrl-alt-delor

8,73831947




8,73831947











  • If it is only allowing local access, then why can I see the port listening from another machine?
    – Katya Veselnitskaya
    Jun 13 at 15:35










  • Yes, set your firewall to block it. And look at the X11 configuration.
    – ctrl-alt-delor
    Jun 13 at 15:56










  • Yes thank you, I have it working now. :)
    – Katya Veselnitskaya
    Jun 13 at 16:03

















  • If it is only allowing local access, then why can I see the port listening from another machine?
    – Katya Veselnitskaya
    Jun 13 at 15:35










  • Yes, set your firewall to block it. And look at the X11 configuration.
    – ctrl-alt-delor
    Jun 13 at 15:56










  • Yes thank you, I have it working now. :)
    – Katya Veselnitskaya
    Jun 13 at 16:03
















If it is only allowing local access, then why can I see the port listening from another machine?
– Katya Veselnitskaya
Jun 13 at 15:35




If it is only allowing local access, then why can I see the port listening from another machine?
– Katya Veselnitskaya
Jun 13 at 15:35












Yes, set your firewall to block it. And look at the X11 configuration.
– ctrl-alt-delor
Jun 13 at 15:56




Yes, set your firewall to block it. And look at the X11 configuration.
– ctrl-alt-delor
Jun 13 at 15:56












Yes thank you, I have it working now. :)
– Katya Veselnitskaya
Jun 13 at 16:03





Yes thank you, I have it working now. :)
– Katya Veselnitskaya
Jun 13 at 16:03













 

draft saved


draft discarded


























 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f449542%2fchange-default-x11-forwarding-port%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

How to check contact read email or not when send email to Individual?

Bahrain

Postfix configuration issue with fips on centos 7; mailgun relay