X11 traffic is being dropped, even with "Any, Any, Accept" rule

[Herschel_Liang]

sk22180 say that [Note: An "any" rule will not allow ports (6000-6003) (ports that match the X11 TCP built in service) at all, by default. This can be changed: see sk41749 - X11 traffic is being dropped, even with "Any, Any, Accept" rule.]

In our enviroment, our X11 traffic destination port is TCP 6011, why is rejected by rulebase? Is there described not so clear?

[_Val_]

X11 is a complex service and cannot be matched to Any-Any-Accept, and the SK explains. You need to create a rull with X11 specified in the Service column for it to be properly accepted.

[Herschel_Liang]

Look at screenshot, X11 default tcp port should be 6000-6063 but not 6000-6003.

[Maarten_Sjouw]

X11 is one of the few services that has always been excluded from Any, so you need to add a rule above with X11 in it. Or you need to adjust the X11 service itself and allow it to Match for Any.

[Timothy_Hall]

Or you can uncheck this somewhat hidden Global Properties checkbox to disable this behavior regarding X11 ports: