Re: X Window over SSH

From: nrosenb2@csc.com
Date: 08/10/01 

Subject: Re: X Window over SSH
To: "Greg Saoutine" <gsaoutine@hotmail.com>
Message-ID: <OF4DF38392.0EC92180-ON80256AA4.0036C2BD@com>
From: nrosenb2@csc.com
Date: Fri, 10 Aug 2001 11:45:43 +0100

Greg,

You could run ipf (IP Filter) on the Sun box to do this without setting up
a dedicated FW in front of the Sun box or like myself, use exceed over ssh
on a windows box. In fact I run both but use exceed because you can render
your unix desktop in a decent resolution without a performace hit
(Windowmaker & enlightenment need good resolutions). The latter (exceed
solution) is much easier to setup however you need to use windows ** DUCK
** ;-) (I have written a mini-howto that I could forward on if you want).
You can get more information on ip filter at
http://coombs.anu.edu.au/~avalon/

Hope this helps

Rgds

Nick

                                                                                                                                             
                                                                                                                                             
                    "Greg To: focus-sun@securityfocus.com
                    Saoutine" cc:
                    <gsaoutine@ho Subject: X Window over SSH
                    tmail.com>
                                                                                                                                             
                    08/08/01
                    20:18
                                                                                                                                             
                                                                                                                                             

My colleague came across the following within one of Sun's Newsgroups:

[snip]
Xsun currently provides no way to disable listening for TCP connections.
If you need to worry about keeping people from connecting to the port,
you will need to use some sort of firewall software to block them.
[snip]

Does it mean that the only way to *effectively* pipe X via SSH port 22 is
to
set up a FW in front of the Sun box blocking port 6000? Any other
ideas/solutions?

Thank you,
Greg Saoutine

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Relevant Pages

  • Re: X Window over SSH
    ... > You could run ipf (IP Filter) on the Sun box to do this without setting up ... > solution) is much easier to setup however you need to use windows ** DUCK ... A decent ipf ruleset or firewall are pretty much required if you're concerned ...
    (Focus-SUN)
  • Re: OpenSSH, Telnet, Windows Authentication and double-hops
    ... >> ssh -L) ... JM> in seperate DOS console windows in this order: ... I'm using the 3.8 version of OpenSSH. ... >> Kerberos ticket, or your password in order to acquire one. ...
    (comp.security.ssh)
  • Re: OpenSSH, Telnet, Windows Authentication and double-hops
    ... >> ssh -L) ... JM> in seperate DOS console windows in this order: ... >> Kerberos ticket, or your password in order to acquire one. ... JM> We're focusing on the OpenSSH for Windows distribution. ...
    (comp.security.ssh)
  • Re: FC6 VPN
    ... Then you can run any application you would like off the server by simply running it, or if you want to run a whole session, use gnomesession. ... ssh client that supports X forwarding, which is want you want to be looking at. ... SSH allows you to forward any local port to any remote port. ... If you need to connect to, say a windows share, you would forward your local port to the linux server through the ssh tunnel. ...
    (Fedora)
  • Re: OpenSSH, Telnet, Windows Authentication and double-hops
    ... deployment on a Windows network. ... Does this mean that you are setting SSH port forwarding ... does not provide the other side with either a Kerberos ticket, ... We're focusing on the OpenSSH for Windows distribution. ...
    (comp.security.ssh)