On 8/23/05, Theo de Raadt <[EMAIL PROTECTED]> wrote: > > > That is the most ridiculous thing I've heard all day. Lots of people > > > run servers and must block them, on the same machine. Probably every > > > single one of us. > > > > I'm not sure I understand what you mean. If you're going to run a > > server, what's the point of blocking it? Might as well turn it off. > > My laptops filter port 6000 and up, thank you very much. > > I will not stop running X. > > You must just just plain not understand what you are saying. > > Your statements are beyond ridiculous. You are saying "If you need > to filter it, you should not be running it".
X doesn't have to listen on TCP 6000, you can setup a unix socket, and it's no longer reachable from the network, and you still have full functionality (I know, I do just that). There's more than one way to do anything. If something needs to only be locally accessable, only have it listen locally, or use unix sockets instead of tcp/udp sockets completely. Jason