Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using Xvfb to run an a wine background application that needs a valid display. It appears that it binds to *:x11. For security reasons I would like to avoid opening any unnecessary ports.

Is there any way force Xvfb to bind to localhost rather than *?

share|improve this question
up vote 4 down vote accepted

Actually, if I understand your need correctly you can just skip TCP altogether.

Xvfb :0 -nolisten tcp

Afterwards this works:


And you can check yourself with netstat -ntlp | grep Xvfb that Xvfb has no ports open.

share|improve this answer
Thanks, yes this seems to work fine. For some reason I thought it uses localhost by default, but now I assume it uses unix sockets - which makes perfect sense. – Zulan May 3 '11 at 17:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.