port 6000 and 6001

[David A. Bandel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 18 Jan 2004 21:16:10 +0800
toylet <toylet at mail.hongkong.com> wrote:

> lately my iptables logged many attempts to port 6000 and 6001. Is
> there something going on in the net?
> 
>     hits port
>     ---- -----
>       26	1736
>       46	135
>       68	445
>      369	6001
>      715	6000
> 

6000 and 6001 are used by X.  Unless you are using network connections
to your X server, these ports should be off (you can start X using the
"-nolisten tcp" option, if using xdm that option goes in
/etc/X11/xdm/Xservers).

You didn't indicate if the connections were coming from inside (another
system running X) or outside.  If coming from outside, it may be an
attempt to compromise your X server (which runs as root).

Ciao,

David A. Bandel
- -- 
Focus on the dream, not the competition.
		Nemesis Racing Team motto
GPG key autoresponder:  mailto:david_key at pananix.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFACovFj31PLQNUbV4RAiMNAJ0fLlJ3rAb0uDWqmV5CK6MtXS6UBwCfYOCT
KODJKZHKjYfrCme3dZHmtQg=
=p9F/
-----END PGP SIGNATURE-----