Re: disabling remote xdm logins

1998-03-03 Thread Ossama Othman

 ipfwadm -I -a reject -P udp -S 0.0.0.0/0 -W eth0 -D 209.109.31.9 177

This only works for Linux, and only if IP Firewalling is enabled in the
kernel, right?  I need to be able to prevent xdm logins using the
standard xdm stuff on Linux and possibly some non-Linux systems.  Based
on the xdm documentation, it does seem like I should be able to disable
remote xdm logins using the Xaccess file.  Unfortunately, I can't seem to
configure xdm properly so that it will prevent remote xdm logins.

 (btw, it's not a broadcast -- the client sends a UDP broadcast.)

Yeah?  Heh, okay...my bad.  :)
So what actually happens?  Is the xdm on the local machine listening for
xdm requests?  Thanks for the info.

-Ossama


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: disabling remote xdm logins

1998-03-03 Thread Joost Kooij
On Mon, 2 Mar 1998, Ossama Othman wrote:

 Hi,
 
 I am trying to disable remote xdm logins from terminals and from some
 remote xdm login widgets.  I tried to modify the Xaccess file according to
 the docs and then restarting xdm but I still can't seem to get xdm to stop  
 broadcasting to the rest of the machines on the same subnet that it is
 accepting xdm logins.
 
 Could someone please explain how I can configure my debian system to stop
 accepting xdm logins from remote machines?

Look at the file /etc/X11/xdm/Xaccess, it is full of comments that
describe the file's function and format:

# The first form tells xdm which displays to respond to itself.
# The second form tells xdm to forward indirect queries from hosts matching
# the specified pattern to the indicated list of hosts.
# The third form tells xdm to handle indirect queries using the chooser;
# the chooser is directed to send its own queries out via the broadcast
# address and display the results on the terminal.
# The fourth form is similar to the third, except instead of using the
# broadcast address, it sends DirectQuerys to each of the hosts in the list

You are probably mostly interested in the first form.
On my machine, where I haven't changed it, the first form entry reads:

*   #any host can get a login window

If you change the * to localhost then I guess that would stop xdm from
responding to any display (xserver) but the one on your console.

Cheers,


Joost


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: disabling remote xdm logins

1998-03-02 Thread Thomas Lakofski
ipfwadm -I -a reject -P udp -S 0.0.0.0/0 -W eth0 -D 209.109.31.9 177

works for me...

(btw, it's not a broadcast -- the client sends a UDP broadcast.)

-t

On Mon, 2 Mar 1998, Ossama Othman wrote:

 From: Ossama Othman [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Mon, 2 Mar 1998 17:25:47 -0500 (EST)
 Subject: disabling remote xdm logins
 
 Hi,
 
 I am trying to disable remote xdm logins from terminals and from some
 remote xdm login widgets.  I tried to modify the Xaccess file according to
 the docs and then restarting xdm but I still can't seem to get xdm to stop  
 broadcasting to the rest of the machines on the same subnet that it is
 accepting xdm logins.
 
 Could someone please explain how I can configure my debian system to stop
 accepting xdm logins from remote machines?


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .