Disable port 6000 (X11) for Openvms

[ahdroo123]

Hi all

can anyone help on guiding me how do i disable X11 port 6000 from listening?

Thank you
Regards,
Andrew

[Joseph Huber_1]

Port 6000 is the (workstation) server port, i.e. serving the local graphic console.
either no local display is needed at all, then simply don't start the X11 server
(define DECW$IGNORE_WORKSTATION in sylogicals.com),
or
don't activate TCPIP transport (omit TCPIP from DECW$SERVER_TRANSPORTS symbol in sys$manager:decw$private_server_setup.com).
But I think this also disables TCPIP transport for clients, so it depends on Your sites need.

[Hoff]

Or get and use an external firewall, if this unfortunately terse problem statement is in response to port checks performed in support IT security auditing.

[John Gillings]

Andrew,

Apart from disabling DECwindows, if you want a belt and braces approach, write yourself a service that listens on port 6000, catches incoming requests then ignores them. Start it before X11 has a chance to start, hijacking its port.

[ahdroo123]

thanks guys, i've copied the file and make the change, it was .template and restarted decw and port 6000 is no longer listening.

I've put DECNET,LOCAL in transport, i will still get my X11 on my monitor right?

[Joseph Huber_1]

>I've put DECNET,LOCAL in transport, i will still get my X11 on my monitor right?

Yes, but no more display from remote clients over TCPIP.

[ahdroo123]

Thanks guys, mission accomplished :)

[Steven Schweda]

> Yes, but no more display from remote
> clients over TCPIP.

Is it worth mentioning (complaining) that
those "remote clients" are actually remote
X _servers_ in this context. (And you're not
really displaying "from" them, but _on_
them.)

> [...] i will still get my X11 on my monitor
> right?

Most likely, but it would depend on how your
DISPLAY got set. We non-psychics don't know
very much about "my monitor" (or any of the
rest of your system configuration).

SHOW DISPLAY

Assuming that that says "Transport: DECNET"
or "Transport: LOCAL", then no doubt, SET
DISPLAY /TRANSPORT = TCPIP would now cause
more problems than before.

[Joseph Huber_1]

>>
s it worth mentioning (complaining) that
those "remote clients" are actually remote
X _servers_ in this context. (And you're not
really displaying "from" them, but _on_
them.)
<<

No, BOTH ways: remote clients can't display on the local display,
and local (VMS) clients can't display on remote displays.

[Steven Schweda]

> No, BOTH ways: [...]

One way doesn't have much to do with the VMS
system _listening_ on port 6000. But yes,
disabling the transport disables
communication with remote X servers and
clients.