Re: Xdm serving network from my machine!

1997-09-22 Thread Brandon Mitchell
There's not much of a difference between this and them getting a telnet
prompt.  Sure they can look at your front door, but they don't get
anywhere unless they have a key.  If this is still a big problem, look
into /etc/host.deny, or see what port it is on and try /etc/services.

Found it in /etc/services, comment these out and restart inetd (killall
-HUP inetd):
xdmcp   177/tcp   # X Display Mgr. Control Proto
xdmcp   177/udp

Good luck,
Brandon

On Mon, 22 Sep 1997, Buddha Buck wrote:

> Greetings,
> 
>   I run Debian "unstable" connected to a dorm network at my school.  
> Recently, people have started experimenting with Win95-based X servers, 
> which apparantly broadcast messages across the network looking for 
> XDMCP servers willing to use their display.  I found about this by 
> reading a school-based newsgroup where someone mentioned getting a XDM 
> login screen from my machine.
> 
>   At the very least, I consider this a security problem.  I don't want 
> to have to run x via startx, but I -really- don't want to offer login 
> screens to everybody on the local net.  If that is how xdm is 
> configured by default, I'll definately file a bug on it.
> 
>   How can I configure xdm so that it will -only- serve local servers?

-
Brandon Mitchell E-mail: [EMAIL PROTECTED]
  Homepage: http://www.geocities.com/SiliconValley/7877/home.html
  PGP: finger -l [EMAIL PROTECTED] 
"We all know Linux is great...it does infinite loops in 5 seconds."
--Linus Torvalds


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Xdm serving network from my machine!

1997-09-22 Thread Carey Evans
Buddha Buck <[EMAIL PROTECTED]> writes:

[snip]

>   How can I configure xdm so that it will -only- serve local servers?

`man xdm' under "XDMCP ACCESS CONTROL" describes the file Xaccess,
which on Debian is /etc/X11/xdm/Xaccess.  You could also use ipfwadm
and a kernel with firewalling enabled and block external (i.e. on
interface eth0) TCP access to port 6000.

BTW, iplogger and xconsole are very good for paranoia; although I'm
not sure whether they increase or decrease it...

-- 
Carey Evans  <*>  http://home.clear.net.nz/pages/c.evans/  gc

kernel: Warning: possible SYN flooding. Sending cookies. 
kernel: validated probe(17f, 17f, 11557, 5010, -1645409555) 


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .