Re: Do you permit X11 via proxy firewall?

["K K" <kkadow () gmail com>]

On 9/5/07, ArkanoiD <ark () eltex net> wrote:
> And, if yes, how do you implement it?
. . .
> Or is x11 firewall support just a useless tradition?

If you already permit SSH, then X11 can trivially be tunneled in SSH.
Well, technically, any protocol can run inside SSH (if you have the
latest OpenSSH), but X is particularly well-supported.


On 9/5/07, Skough Axel U/IT-S <axel.skough () scb se> wrote:
> Why should one desire the allowance of a computer from unsecure network to control the keyboard and screen on a 
> computer on inside?
> I would strongly recommend total blocking of the X11 ports through a firewall regardless of the vendor!

What about the issue of permitting *outbound* connections from
internal hosts to access X11 on the "outside" of the firewall,
including on your DMZ?  Perhaps X has been superseded by VNC, RDP, and
Citrix, and is no longer a consideration for firewall policies?

Kevin
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards