Ssh -X user@router X11Forwarding

peterka

on pfSense 2.3.4-RELEASE-p1 (amd64) we installed X11Forwarding with:

1.) pkg add http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/xauth-1.0.10.txz
then add all demanded packages

2.) then xauth is installed under
/usr/local/bin/xauth

3.) in file /etc/sshd change / add
(with menu "Diagnostics/ edit file")

change
$sshconf .= "X11Forwarding no\n";
TO yes

add
$sshconf .= "XAuthLocation /usr/local/bin/xauth \n";

4.) in file /etc/ssh/ssh_config
change
# ForwardX11 no
to yes
and add
# XAUthLocation /usr/local/bin/xauth

Greetings, Peter

jimp

While you are free to do that on your own, it's an awful idea. Don't load X libraries on the firewall for convenience, especially using a non-pfSense package repository. The odds are high that you'll end up causing yourself problems down the road trying to maintain that system.

Don't use the firewall for SSH X forwarding, use a VPN and hit what you need directly.