iptables question

[Paul Howarth]

Margaret Doll wrote:
> 
> On Jul 11, 2005, at 5:54 PM, Ernie McCracken wrote:
> 
>> On Mon, Jul 11, 2005 at 05:39:36PM -0400, Margaret Doll wrote:
>>
>>>
>>> I have
>>>
>>>
>>> #X11Forwarding no
>>> X11Forwarding yes
>>> #X11DisplayOffset 10
>>>
>>> in /etc/ssh/sshd_config
>>>
>>
>> Remember to restart sshd after making changes to the config files.
>>
>>
>>
>>>
>>> I have the systems names in each of the computers' /etc/hosts files.
>>>
>>> My session is
>>>
>>> xhost computer1
>>>
>>
>> This is not necessary.
>>
>>
>>> ssh myaccount/computer1
>>>
>>
>> As Scot mentioned, use ssh -Y or ssh -X.  See "man ssh" to see why - Y is
>> preferred.
>>
>>
>>> export DISPLAY=computer2:0
>>>
>>
>> This step is not necessary since the X11 tunnelling should be taken  care
>> of for you.
>>
>> Do "echo $DISPLAY" to see what it is set to.
>>
>> -- 
>> fedora-list mailing list
>> fedora-list at redhat.com
>> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> 
> 
> Although /etc/ssh/sshd_config had been configured previously with
> 
>>> X11Forwarding yes
> 
> I restarted sshd and network on both computers.
> 
> I tried
> 
> ssh -Y user at computer1
> 
> but the current openssh on the systems did not support the "Y" option.
> 
> I tried ssh -x user at computer1
> export DISPLAY=computer2:0
> 
> "printenv DISPLAY" comes back with computer2:0 and the error message
> when I try graphic software across the network says  that it can't  display
> on computer2:0.

If you are using X forwarding with ssh, you don't need to use "xhost" on 
the server end and you don't need to set $DISPLAY at the client end - 
ssh does all of that for you transparently.

Try:

$ ssh -X user at computer1
(that's -X, not -x)

Then try running your graphic software without setting $DISPLAY.

Paul.