From owner-freebsd-questions@FreeBSD.ORG  Sat Dec 23 21:00:28 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id A5A3616A412
	for <freebsd-questions@freebsd.org>;
	Sat, 23 Dec 2006 21:00:28 +0000 (UTC) (envelope-from dick@nagual.nl)
Received: from nagual.nl (cc20684-a.assen1.dr.home.nl [82.74.10.158])
	by mx1.freebsd.org (Postfix) with ESMTP id 062CD13C448
	for <freebsd-questions@freebsd.org>;
	Sat, 23 Dec 2006 21:00:27 +0000 (UTC) (envelope-from dick@nagual.nl)
Received: from 192.168.11.29 (arwen.nagual.nl [192.168.11.29])
	by nagual.nl with esmtp; Sat, 23 Dec 2006 21:50:24 +0100
	id 00039809.458D9690.00001125
From: dick hoogendijk <dick@nagual.nl>
To: FreeBSD Users Questions <freebsd-questions@freebsd.org>
Message-Id: <1166907080.5478.10.camel@arwen>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Mailer: Ximian Evolution 1.4.6.308 
Date: Sat, 23 Dec 2006 21:51:21 +0100
Subject: remote graphical login to a fbsd server
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Dec 2006 21:00:28 -0000

[From the handbook]
In order for other clients to connect to the display server, edit the
access control rules, and enable the connection listener. By default
these are set to conservative values. To make XDM listen for
connections, first comment out a line in the xdm-config file:

! SECURITY: do not listen for XDMCP or Chooser requests
! Comment out this line if you want to manage X terminals with xdm
DisplayManager.requestPort:     0

This I understand. When I commnent this line out xdm will listen to
remote login requests. But I want to make sure that ONLY machines from
my *local* network can make a connection. In the Xaccess file I see
something like
"listen * Bff01:0:0:0:0:0:0:12b ff02:0:0:0:0:0:0:12b
ff03:0:0:0:0:0:0:12b ff04:0:0:0:0:0:0:12b ff05:0:0:0:0:0:0:12b "

What do I have to change in this 'LISTEN' line to have connections from
other local machines but *not* from outside?

-- 
http://nagual.nl/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 6.1 ++ Solaris 10 6/06 ++