How to disable XFree86 and wdm listening ports

[Nigel Houghton]

wdm is a replacement for xdm and has it's own configuration directory,
similar in nature to xdm but called wdm.

There are different ways to achieve your desired result, you should find
an appropriate place in /usr/X11R6/lib/X11/wdm/wdm-config to add the
-nolisten tcp option to the server line similar to the xdm option you
tried already.

For gdm, the process is similar the line to start the X server is in
gdm.conf and would look like command=/usr/X11R6/bin/X -nolisten tcp.

There are other places this can be done, but these options might be
easiest for you. You might also want to make sure you have XDMCP turned
off also otherwise you'll be listening on udp 177 too.

Around 10:15pm Wolfgang Kess said:

WK :Hello,
WK :
WK :what is the right way to disable XFree86 and wdm listening
WK :ports tcp 6000 and tcp 1024.
WK :
WK :I read in man XFree86 about the -nolisten tcp option
WK :and tried to set in  /usr/X11R6/lib/X11/xdm
WK :
WK ::0 local /usr/X11R6/bin/X -nolisten tcp
WK :
WK :but it was not successful.
WK :
WK :
WK :What is the right way to close the ports without use of IPFW?
WK :
WK :Your help would be appreciated.
WK :
WK :Thank´s
WK :Wolfgang
WK :
WK :_______________________________________________
WK :freebsd-security at freebsd.org mailing list
WK :http://lists.freebsd.org/mailman/listinfo/freebsd-security
WK :To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"
WK :

-------------------------------------------------------------
Nigel Houghton   Security Research Engineer   Sourcefire Inc.
                 Vulnerability Research Team

"Mankind hasn't even got the technology to create a toupee
that doesn't get big laughs." -- Lister