iptables: how to open HPUX X11 protocol

[Miguel Cuesta]

Hello.

I'm using RedHat 7.1 with iptables, and it's the firewall between my LAN and the Internet.

I was able to open 'telnet' conexion, and succeeded in connecting an external server.

But I want to export the display, and use X11 and CDE... what protocols must I open???

Best regards and thank you very much.

[Christopher C. Weis]

I've noticed several people recently talking about using telnet to get at other machines. This is what SSH is for. The security implications of telnet are large, especially when knowingly going through a "gateway" machine. I would seriously recommend using SSH, for you and anyone else reading this. Not to rip on people about this, but the latest group of telnet questions has me a bit concerned.


Okay, now for your question. If you're using SSH, the display is (usually> automatically forwarded and encrypted, so your problem should be solved. Otherwise, you'll have to open up port 6000 to get X windows to display. Remember, that's port 6000 on the client machine, not on the server. If you actually want to use all of CDE, you'll need to start the local Xserver up so that it points to your server machine in addition to opening up port 177 (on the server). Something like "xserver -query hostname" or "xserver -broadcast" should get this started also. This also brings up the issue of allowing font server requests through the gateway machine and making sure CDE is set up correctly, and I'm not going there...

So, try opening up port 6000 on the client side and hopefully all will be well. Good luck.