Operating System - OpenVMS
cancel
Showing results for 
Search instead for 
Did you mean: 

Disable port 6000 (X11) for Openvms

 
ahdroo123
Occasional Visitor

Disable port 6000 (X11) for Openvms

Hi all

can anyone help on guiding me how do i disable X11 port 6000 from listening?

Thank you
Regards,
Andrew
9 REPLIES 9
Joseph Huber_1
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

Port 6000 is the (workstation) server port, i.e. serving the local graphic console.
either no local display is needed at all, then simply don't start the X11 server
(define DECW$IGNORE_WORKSTATION in sylogicals.com),
or
don't activate TCPIP transport (omit TCPIP from DECW$SERVER_TRANSPORTS symbol in sys$manager:decw$private_server_setup.com).
But I think this also disables TCPIP transport for clients, so it depends on Your sites need.
http://www.mpp.mpg.de/~huber
Hoff
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

Or get and use an external firewall, if this unfortunately terse problem statement is in response to port checks performed in support IT security auditing.
John Gillings
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

Andrew,

Apart from disabling DECwindows, if you want a belt and braces approach, write yourself a service that listens on port 6000, catches incoming requests then ignores them. Start it before X11 has a chance to start, hijacking its port.
A crucible of informative mistakes
ahdroo123
Occasional Visitor

Re: Disable port 6000 (X11) for Openvms

thanks guys, i've copied the file and make the change, it was .template and restarted decw and port 6000 is no longer listening.

I've put DECNET,LOCAL in transport, i will still get my X11 on my monitor right?
Joseph Huber_1
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

>I've put DECNET,LOCAL in transport, i will still get my X11 on my monitor right?

Yes, but no more display from remote clients over TCPIP.
http://www.mpp.mpg.de/~huber
ahdroo123
Occasional Visitor

Re: Disable port 6000 (X11) for Openvms

Thanks guys, mission accomplished :)
Steven Schweda
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

> Yes, but no more display from remote
> clients over TCPIP.

Is it worth mentioning (complaining) that
those "remote clients" are actually remote
X _servers_ in this context. (And you're not
really displaying "from" them, but _on_
them.)

> [...] i will still get my X11 on my monitor
> right?

Most likely, but it would depend on how your
DISPLAY got set. We non-psychics don't know
very much about "my monitor" (or any of the
rest of your system configuration).

SHOW DISPLAY

Assuming that that says "Transport: DECNET"
or "Transport: LOCAL", then no doubt, SET
DISPLAY /TRANSPORT = TCPIP would now cause
more problems than before.
Joseph Huber_1
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

>>
s it worth mentioning (complaining) that
those "remote clients" are actually remote
X _servers_ in this context. (And you're not
really displaying "from" them, but _on_
them.)
<<

No, BOTH ways: remote clients can't display on the local display,
and local (VMS) clients can't display on remote displays.
http://www.mpp.mpg.de/~huber
Steven Schweda
Honored Contributor

Re: Disable port 6000 (X11) for Openvms

> No, BOTH ways: [...]

One way doesn't have much to do with the VMS
system _listening_ on port 6000. But yes,
disabling the transport disables
communication with remote X servers and
clients.