I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.
5
-
It is listening on localhost only by default. – Ipor Sircer Jun 13 '18 at 13:13
-
Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR> – Katya Veselnitskaya Jun 13 '18 at 13:35
-
Because you've set other than default options or something else is listening not sshd. – Ipor Sircer Jun 13 '18 at 13:40
-
What OS are you using? – ctrl-alt-delor Jun 13 '18 at 14:23
-
It is Debian Jessie Lite – Katya Veselnitskaya Jun 13 '18 at 15:33
Add a comment
|
X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.
Then ssh can be used to connect to a remote machine, with ssh -X.
answered Jun 13 '18 at 14:25
-
If it is only allowing local access, then why can I see the port listening from another machine? – Katya Veselnitskaya Jun 13 '18 at 15:35
-
Yes, set your firewall to block it. And look at the X11 configuration. – ctrl-alt-delor Jun 13 '18 at 15:56
