From mike.gabriel@das-netzwerkteam.de Mon Sep 17 16:43:00 2012 Received: (at submit) by bugs.x2go.org; 17 Sep 2012 14:43:01 +0000 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id D5EDC5DB34 for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id ACC402E9 for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 926623BC12 for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZwAlXk0qZZqG for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 70C4A3BCF2 for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 578193BC12 for ; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on grimnir.das-netzwerkteam.de X-Spam-Flag: NO X-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.1 running as userid= X-Spam-Level: X-Spam-Bayes-Score: 0.0000 Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 0F4023BCF2; Mon, 17 Sep 2012 16:43:00 +0200 (CEST) Received: from m-110.informatik.uni-kiel.de (m-110.informatik.uni-kiel.de [134.245.254.110]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Mon, 17 Sep 2012 16:43:00 +0200 Message-ID: <20120917164300.285117ouzzht95v8@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Mon, 17 Sep 2012 16:43:00 +0200 From: Mike Gabriel To: submit@bugs.x2go.org Subject: X2Go Clients Gr-Tunnel (client-side endpoint) listens on all TCP/IP address (probably should be: loopback only) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_42kaj7v6tpw"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_42kaj7v6tpw Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Package: x2goclient Severity: normal Version: 3.99.3.0-prerelease Hi all, I just stumbled over an issue that we maybe have to address. Probably in X2Go Client, I guess. X2Go Client launches nxproxy and netstat -ap delivers this output: """ tcp 0 0 *:31004 *:* LISTEN 20139/x2goclient ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ tcp 0 0 *:16001 *:* LISTEN 6822/pulseaudio tcp 0 0 *:4713 *:* LISTEN 6822/pulseaudio tcp 0 0 localhost:44610 localhost:ssh VERBUNDEN 20139/x2goclient tcp 0 0 localhost:44609 localhost:ssh VERBUNDEN 20139/x2goclient tcp 0 0 localhost:45257 localhost:31004 VERBUNDEN 20161/nxproxy tcp 0 0 localhost:31004 localhost:45257 VERBUNDEN 20139/x2goclient tcp 0 0 localhost:31004 localhost:45257 VERBUNDEN 20139/x2goclient tcp6 0 0 [::]:16001 [::]:* LISTEN 6822/pulseaudio tcp6 0 0 [::]:4713 [::]:* LISTEN 6822/pulseaudio """ PyHoca-GUI with Python X2Go in its back, however, deliveres this output with netstat -p: """ tcp 0 0 localhost:30004 *:* LISTEN 20728/pyhoca-gui tcp 0 0 *:16001 *:* LISTEN 6822/pulseaudio tcp 0 0 *:4713 *:* LISTEN 6822/pulseaudio tcp 0 0 localhost:30004 localhost:52107 VERBUNDEN 20728/pyhoca-gui ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ tcp 0 0 m-110.informatik.:41910 fylgja.das-netzwe:32032 VERBUNDEN 20728/pyhoca-gui tcp 0 0 localhost:52107 localhost:30004 VERBUNDEN 20773/nxproxy tcp6 0 0 [::]:16001 [::]:* LISTEN 6822/pulseaudio tcp6 0 0 [::]:4713 [::]:* LISTEN 6822/pulseaudio """ Output with lsof -i is even more weird, as lsof -i shows that nxproxy is listening on all TCP/IP addresses, not X2Go Client. """ nxproxy 9514 mike 5u IPv4 321255 0t0 TCP localhost:44690->localhost:31004 (ESTABLISHED) nxproxy 9514 mike 12u IPv4 321189 0t0 TCP m-110.informatik.uni-kiel.de:41258->fylgja.das-netzwerkteam.de:32032 (ESTABLISHED) nxproxy 9514 mike 13u IPv4 321239 0t0 TCP *:31004 (LISTEN) nxproxy 9518 mike 12u IPv4 321189 0t0 TCP m-110.informatik.uni-kiel.de:41258->fylgja.das-netzwerkteam.de:32032 (ESTABLISHED) nxproxy 9518 mike 13u IPv4 321239 0t0 TCP *:31004 (LISTEN) """ Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_42kaj7v6tpw Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJQVzbzAAoJEJr0azAldxsxpAkP/2+0bOEya/8eAPe6q9HgRILd UH99nSCGrtVg9/+QTiGi7lQeqtERmPgHWUz7y7UT+6W1v13ox3I9I3UaQnkouUo3 e0SoetinCj5diXCY7UJ5sVpbJrpAVp2HkF37IxFXF0Q7JJTbHRpZwiRCWky+eBaK lMsclDkKPu2/SgdCN4iqKLG5y+TLDPFXc+aGzLjZYfNl5rjMHgSZ5L2buWwe5oXR dreqd4DElJINe44jtu6E1mIxWT5sYTTEmYOo/LEnC2re9cEMzZfWQohGVVGTJr/E 8Bn/OsCkvmrSDhXEEbsaXEdRTXTWAH90mkL8vGj98TfTNcnUdM77mC7cPOLmUP1N qtT51r1sKzgREsxpZaeQLKPpqrqaLyBgeWO5l/U8dTLPTXxy5Dc5y3X06DqnwSCk Z6DEGVuM8cKy1MHl71UcAmpr+NELT0cpH0X33UGgJ/2FEWYTyZy5OWEawelsPW72 F8dtqpbd7kc9mRkV9GFwdwHETkMnO3kI0FAU3N9xsPJbrVC+1rJC7QVYQyzj6RHX Jy4D71mIxBoNBKwJCAMmd8YRq90DoWPjQV2BtSGVWQt/F0tx+pJVzoUth384UrCn YKxlr7jO+vQNK/3NtyiUo5EVLWVBUpGdznpZZ+ZWaqytkx2oniKIhXhx4q5SqBOH 2la9lrv7kAIag1mY443s =tG30 -----END PGP SIGNATURE----- --=_42kaj7v6tpw--