Re: port scans and X redirection

["Tim Carmean" <tecarmea@xxxxxxx>]

ok i think i know what the problem is.  the remote x server is trying to
send the data through port 6000 but my firewall is fowarding 6001.  is there
some command somewhere uring the X -query process where i can tell the
server what port i want the stuff to com in on?

thanks
tim carmean
----- Original Message -----
From: "Tim Carmean" <tecarmea@xxxxxxx>
To: <lug-l@xxxxxxx>
Sent: Tuesday, February 26, 2002 1:32 PM
Subject: Re: port scans and X redirection


> that still doesnt work.  i wonder what the problem is.  i keep getting
that
> same error too.
>
> thanks
> tim carmean
> ----- Original Message -----
> From: "David O. Torrey, Jr." <tj@xxxxxxx>
> To: <lug-l@xxxxxxx>
> Sent: Tuesday, February 26, 2002 1:09 PM
> Subject: Re: port scans and X redirection
>
>
> > For one application, it might be easier to just use ssh with
X-redirection
> > turned on.  The $DISPLAY setting is taken care of for you, and
everything
> > should be happy.
> >
> > As for forwarding ports, you'll want to forward port 6001 to the inside
> > machine's port 6000 (not 6001):
> >
> > $IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 6001 -j
DNAT --to
> 192.168.0.70:6001
> >
> > should be:
> >
> > $IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 6001 -j
DNAT --to
> 192.168.0.70:6000
> >
> > X is a TCP-based protocol, if that helps.
> >
> > Thanks,
> > Dave
> >
> >
+------------------------------------------------------------------------+
> > | David Torrey                     Senior Systems Programmer
|
> > | tj@xxxxxxx                       Center for Experimental Computation
|
> > | (906) 487-2165 voice             Michigan Technological University
|
> > | (906) 487-2283 fax                  Houghton, MI 49931
|
> > | http://www.cec.mtu.edu/~tj/
|
> >
+------------------------------------------------------------------------+
> >
> > On Tue, 26 Feb 2002, Tim Carmean wrote:
> >
> > > all i want to do is X -query snapster11.snap.mtu.edu which is the
civil
> > > server so i can run ideas from my dorm room.  i can do it fine from my
> > > router but the problem is my router only has a 17" screen.  the
machine
> im
> > > trying to X -query from is my HP Workstation running debian and kernel
> > > 2.4.16.  this machine has a 21" monitor (fixed frequency sync on green
> which
> > > is why i dont use it on my main machine).  what i tried was setting
> > > DISPLAY=192.168.0.70:1 (ip and port i want to use), and to my firewall
> > > ruleset:
> > >
> > > $IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 6001 -j
> DNAT --to
> > > 192.168.0.70:6001
> > >
> > > its probably something as simple as being tcp or something but i still
> get
> > > the error "session failed for display 192.168.0.70:1: cannot open
> display"
> > >
> > > all i want to do is be able to do X -query snapster11.snap.mtu.edu so
i
> can
> > > run ideas from the dorm.
> > >
> > > /me wonders if anyone can provide some more insight to his problem
> > >
> > > tim carmean