I want to run X11Forwarding support through my sshd, but the machine has direct Internet access. I would like to change the default port of 6010 to some other port number at the least, but ideally I would also like to have it only listen for localhost connections.

  • It is listening on localhost only by default. – Ipor Sircer Jun 13 '18 at 13:13
  • Why can I see it from another machine with: nmap -Pn -p 6010 <IP_ADDR> – Katya Veselnitskaya Jun 13 '18 at 13:35
  • Because you've set other than default options or something else is listening not sshd. – Ipor Sircer Jun 13 '18 at 13:40
  • What OS are you using? – ctrl-alt-delor Jun 13 '18 at 14:23
  • It is Debian Jessie Lite – Katya Veselnitskaya Jun 13 '18 at 15:33

X11 should be configured to only allow local access, and with xauth, so only the correct user can connect.

Then ssh can be used to connect to a remote machine, with ssh -X.

  • If it is only allowing local access, then why can I see the port listening from another machine? – Katya Veselnitskaya Jun 13 '18 at 15:35
  • Yes, set your firewall to block it. And look at the X11 configuration. – ctrl-alt-delor Jun 13 '18 at 15:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.