X2Go Bug report logs - #31
X2Go Clients Gr-Tunnel (client-side endpoint) listens on all TCP/IP address (probably should be: loopback only)

Full log

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 17 Sep 2012 14:43:01 +0000
From mike.gabriel@das-netzwerkteam.de  Mon Sep 17 16:43:00 2012
Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199])
	by ymir (Postfix) with ESMTPS id D5EDC5DB34
	for <submit@bugs.x2go.org>; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98])
	by freya.das-netzwerkteam.de (Postfix) with ESMTPS id ACC402E9
	for <submit@bugs.x2go.org>; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 926623BC12
	for <submit@bugs.x2go.org>; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de
Received: from grimnir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ZwAlXk0qZZqG for <submit@bugs.x2go.org>;
	Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 70C4A3BCF2
	for <submit@bugs.x2go.org>; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 578193BC12
	for <submit@bugs.x2go.org>; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	grimnir.das-netzwerkteam.de
X-Spam-Flag: NO
X-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=ham version=3.3.1 running as userid=
X-Spam-Level: 
X-Spam-Bayes-Score: 0.0000
Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33)
	id 0F4023BCF2; Mon, 17 Sep 2012 16:43:00 +0200 (CEST)
Received: from m-110.informatik.uni-kiel.de (m-110.informatik.uni-kiel.de
 [134.245.254.110]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP;
 Mon, 17 Sep 2012 16:43:00 +0200
Message-ID: <20120917164300.285117ouzzht95v8@mail.das-netzwerkteam.de>
X-Priority: 3 (Normal)
Date: Mon, 17 Sep 2012 16:43:00 +0200
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: submit@bugs.x2go.org
Subject: X2Go Clients Gr-Tunnel (client-side endpoint) listens on all
 TCP/IP address (probably should be: loopback only)
MIME-Version: 1.0
Content-Type: multipart/signed;
 boundary="=_42kaj7v6tpw";
 protocol="application/pgp-signature";
 micalg="pgp-sha1"
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)

[Message part 1 (text/plain, inline)]

Package: x2goclient
Severity: normal
Version: 3.99.3.0-prerelease

Hi all,

I just stumbled over an issue that we maybe have to address. Probably  
in X2Go Client, I guess.

X2Go Client launches nxproxy and netstat -ap delivers this output:

"""
tcp        0      0 *:31004                 *:*                      
LISTEN      20139/x2goclient
                     
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
tcp        0      0 *:16001                 *:*                      
LISTEN      6822/pulseaudio
tcp        0      0 *:4713                  *:*                      
LISTEN      6822/pulseaudio
tcp        0      0 localhost:44610         localhost:ssh            
VERBUNDEN   20139/x2goclient
tcp        0      0 localhost:44609         localhost:ssh            
VERBUNDEN   20139/x2goclient
tcp        0      0 localhost:45257         localhost:31004          
VERBUNDEN   20161/nxproxy
tcp        0      0 localhost:31004         localhost:45257          
VERBUNDEN   20139/x2goclient
tcp        0      0 localhost:31004         localhost:45257          
VERBUNDEN   20139/x2goclient
tcp6       0      0 [::]:16001              [::]:*                   
LISTEN      6822/pulseaudio
tcp6       0      0 [::]:4713               [::]:*                   
LISTEN      6822/pulseaudio
"""

PyHoca-GUI with Python X2Go in its back, however, deliveres this  
output with netstat -p:

"""
tcp        0      0 localhost:30004         *:*                      
LISTEN      20728/pyhoca-gui
tcp        0      0 *:16001                 *:*                      
LISTEN      6822/pulseaudio
tcp        0      0 *:4713                  *:*                      
LISTEN      6822/pulseaudio
tcp        0      0 localhost:30004         localhost:52107          
VERBUNDEN   20728/pyhoca-gui
                     
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
tcp        0      0 m-110.informatik.:41910 fylgja.das-netzwe:32032  
VERBUNDEN   20728/pyhoca-gui
tcp        0      0 localhost:52107         localhost:30004          
VERBUNDEN   20773/nxproxy
tcp6       0      0 [::]:16001              [::]:*                   
LISTEN      6822/pulseaudio
tcp6       0      0 [::]:4713               [::]:*                   
LISTEN      6822/pulseaudio
"""

Output with lsof -i is even more weird, as lsof -i shows that nxproxy  
is listening on all
TCP/IP addresses, not X2Go Client.

"""
nxproxy    9514 mike    5u  IPv4 321255      0t0  TCP  
localhost:44690->localhost:31004 (ESTABLISHED)
nxproxy    9514 mike   12u  IPv4 321189      0t0  TCP  
m-110.informatik.uni-kiel.de:41258->fylgja.das-netzwerkteam.de:32032  
(ESTABLISHED)
nxproxy    9514 mike   13u  IPv4 321239      0t0  TCP *:31004 (LISTEN)
nxproxy    9518 mike   12u  IPv4 321189      0t0  TCP  
m-110.informatik.uni-kiel.de:41258->fylgja.das-netzwerkteam.de:32032  
(ESTABLISHED)
nxproxy    9518 mike   13u  IPv4 321239      0t0  TCP *:31004 (LISTEN)
"""

Greets,
Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, rothenstein 5, 24214 neudorf-bornstein
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.