AW: [FW1] x11

[Arno Hechenberger <arno@FW1-NOSPAMcitydata.at>]

Hello !

Have you solved this problem ???

There must be a way (I tried it with a PIX and it worked )!!
The fault is the UDP Packet on Port177 where the X server and the X client
initiate the session.

Arno




> -----Ursprungliche Nachricht-----
> Von: owner-fw-1-mailinglist@lists.us.checkpoint.com
> [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]Im Auftrag von
> John Shin
> Gesendet: Montag, 20. Dezember 1999 23:39
> An: Rajeev Kumar; fw-1-mailinglist@lists.us.checkpoint.com
> Betreff: Re: [FW1] x11
> 
> 
> 
> Thanks, I already have a rule.  Instead of telneting from client A to 
> client B, then firing up a x session, he sends a request 
> through UDP177 and 
> then the server responds back with x session.
> 
> John
> 
> At 05:21 PM 12/20/1999 -0500, Rajeev Kumar wrote:
> >X11 service works in a reverse way. Suppose session is:
> >
> >ClientA -> telnet to -> ClientB
> >
> >At ClientB (he sets setenv DISPLAY ClientA:0.0)
> >and fired x application. Now X-Client is (ClientB) and X-server is 
> >(ClientA). (so client
> >server concept is opposite here). With this fact you have to 
> diagnose the 
> >situation. So
> >there must be some rule which allows X-traffic from ClientB 
> -> ClientA in 
> >your FW rule.
> >
> >Rajeev
> >
> >John Shin wrote:
> > >
> > > I have a client who is trying to use x11.  I don't know 
> exactly how it
> > > works, but my understanding is that when client contacts 
> the server, the
> > > initial connection is dropped and the server will open a 
> new connection to
> > > the client between tcp 6000-6063.  Teh client is 
> statically NAT'ed and when
> > > we tested with a client that is not NAT'ed, it works 
> fine, but with NAT'ed
> > > host, we never see the server responding with x11 ports 
> when we snooped
> > > interfaces.  Other services, like telnet, etc. works just 
> fine between the
> > > 2 hosts.  I am inclined to say that the server is the 
> problem, but wanted
> > > to check with you guys first.  Any ideas?
> > > TIA
> > >
> > > John
> > >
> > > 
> > 
> ==============================================================
> ============ 
> > ======
> > >      To unsubscribe from this mailing list, please see 
> the instructions at
> > >                http://www.checkpoint.com/services/mailing.html
> > > 
> > 
> ==============================================================
> ============ 
> > ======
> >
> >--
> >#############################################################
> ############
> >  (Titanic creators used Linux to simulate the sinking of 
> the great ship)
> >#############################################################
> ############
> >                     Rajeev  Kumar (rxk@fluent.com)
> >         Fluent Inc. 10, Cavendish Court, Lebanon NH-03766
> >-------------------------------------------------------------
> ------------
> >Phone ::x 349    Fax ::> >                 Web:: http://www.fluent.com
> >#############################################################
> ############
> 
> 
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================