Re: X11

[Jeffrey Siegal <jbs quiotix com>]

Reuben D. Budiardja wrote:

> On Friday 25 June 2004 12:30 pm, Hambleton, John S. wrote:
>
> > Just curious if any admins run X11 on their servers.
> > In the past I have restricted mine to run level 3. However
> > Taroon has some good graphical configuration utilities.
> > I have added to my iptables rules a filter for the X11 port
> > 6000 tcp. Is that sufficient, or should I revert to the practice
> > of run level 3 only?
>
>
> I use runlevel 3 on the server, but when I need GUI configuration (like the 
> redhat-config-*) I export it to my local workstation from the (remote) 
> server. I don't see any point of running level 5 on the server since no one 
> actually sit in front of it. 

A third option is to use runlevel 3 but use the "startx" command to 
start the GUI when you need it.

Also, the original poster above mentioned an iptables rule for port 
6000.  I assume this means blocking 6000.  I prefer to block by incoming 
connections by default and only open the ports I need, in which case 
6000 would remain blocked.  But in any case, if you're trying to 
completely block X11, you should block a range of ports starting at 
6000, such as 6000-6100.