Restrict X remotely

[Fredric Vådegård]

Hi,

I would like to restrict the X service (CDE etc.) to only a couple of IP-addresses. Can I set up this in the /etc/dt/config/Xsetup or Xservers config file?

//Fredric

[Alex Glennie]

If it were me I'd cp /usr/dt/config/Xaccess -> /etc/dt/config/Xaccess and edit accordingly see the file for syntax .....

[Zafar A. Mohammed_1]

check & edit /usr/dt/config/Xaccess file

Thanks
Zafar

[Wodisch]

Hi Fredric,

you could use "IPFilter/9000" to restrict ports 6000 (X) and 7000 (X Font Server).

FWIW,
Wodisch

[Fredric Vådegård]

Could someone please give me an exemple how to configure the Xaccess file?

I want to restrict the access to a couple of hosts, doesn??t matter if it??s the hostname or the IP-address.

I have tested to configure, but it doesn??t work. I did comment the line with CHOOSER BROADCAST and removed the comment for the %hostlist, but still doesn??t work. I also tried differnt ways of adding hosts to the hostlist and deny hosts at the end of the file (ENTRY FORMAT).

//Fredric

[Robert-Jan Goossens]

Hi Fredric,

take a look at this document,

http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000063236640

Hope it helps,

Robert-Jan.

[Stephen Burkwood · Accepted solution]

Hi Fredric,

Presuming you want to control "direct" xdmcp clients, i.e. those that initiate the comnnection direct to the machine, then all you need to place in the /etc/dt/config/Xaccess file is the hostname (presuming you can reverse lookup the IP from the name) or IP of the chosen client. Place each entry on its own line in the file with nothing else after it e.g.

hostA
hostB
10.0.0.1

etc...

Then run "/usr/dt/bin/dtconfig -reset" to make the changes take effect. The Xaccess file is only read on startup and whenever the above is run.

Regards,
Stephen

[Fredric Vådegård]

Hi,

thanks for you answears. Case solved!