{
  "port": 7100,
  "protocol": "both",
  "service": "X Font Service (xfs)",
  "oneLiner": "The X font server — a legacy daemon that hands rasterized fonts to X11 clients over the network.",
  "whatItIs": "IANA registers 7100 as font-service, and the xfs man page confirms the daemon's default port number is 7100. In the X11 model an X server or client with `FontPath` set to `tcp/host:7100` fetches font metrics and glyphs from xfs rather than from local files. Modern desktops render fonts client-side through fontconfig and Xft, so xfs is effectively obsolete; distributions that still ship it default to a local socket or `-nolisten tcp`. An open 7100 today is either a very old X installation or an unrelated application on the number.",
  "exposure": {
    "verdict": "never",
    "note": "xfs has no meaningful authentication and is unmaintained legacy code with a history of remote overflow bugs; there is no reason to have it reachable off the host."
  },
  "checkCommand": "fslsfonts -server TARGET:7100",
  "links": [
    {
      "title": "xfs(1) — X font server manual page (default port 7100)",
      "url": "https://xorg.freedesktop.org/archive/X11R7.5/doc/man/man1/xfs.1.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7100",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7100",
      "kind": "iana"
    }
  ]
}