Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread carlopmart
Hi all, I need to allow X11 services over ssh for my developers on one openbsd box. Rule for ssh service works ok, but when I try to start a X11 app (like xterm for example on destination host) doesn't works. On openbsd side nothing is dropped. Somebody knows how can I debug this?? Do I

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Rogier Krieger
On 3/23/07, carlopmart [EMAIL PROTECTED] wrote: Do I need to open additional ports or protocols?? Not so much additional ports or protocols, but are you sure you enabled X11 forwarding? A few suggestions for things to check: + in /etc/ssh/sshd_config, did you enable 'X11Forwarding' ? + for

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread carlopmart
Rogier Krieger wrote: On 3/23/07, carlopmart [EMAIL PROTECTED] wrote: Do I need to open additional ports or protocols?? Not so much additional ports or protocols, but are you sure you enabled X11 forwarding? A few suggestions for things to check: + in /etc/ssh/sshd_config, did you enable

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Rogier Krieger
On 3/23/07, carlopmart [EMAIL PROTECTED] wrote: My problem is wih pf rules. If I put on pf.conf pass all, all works ok. Then the easiest debugging feature is doing a tcpdump on pflog0 for blocked packets. Assuming (without your pf.conf, it's hard to guess) you use a default block, add a log

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Jussi Peltola
On Fri, Mar 23, 2007 at 08:35:19AM +0100, carlopmart wrote: My problem is wih pf rules. If I put on pf.conf pass all, all works ok. Did you remember to pass loopback connections?

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Kevin Frand
Are you using antispoof in your pf.conf? if so, X11 forwarding will not work. carlopmart wrote: Hi all, I need to allow X11 services over ssh for my developers on one openbsd box. Rule for ssh service works ok, but when I try to start a X11 app (like xterm for example on destination host)