topic swinstall through firewall in Operating System - HP-UX

swinstall through firewall

Tim Nelson — Mon, 23 May 2005 12:56:51 GMT

Attempting to use swinstall from a server on DMZ to depot inside the firewall.

exported RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2121-2131]on swinstall host.

set RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2121-2131] in swconfig and restarted swagentd on depot.

updated FW rules to allow ports 2121-2131.

I still get a drop message on the firewall after the 2121-2131 is accepted as the client is still attempting an additional connection of some random 58xxx port.

Any suggestions ?
Thanks in advance.

Re: swinstall through firewall

Sanjay_6 — Mon, 23 May 2005 13:45:04 GMT

Hi Tim,

Try this link,

http://www6.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000066918443

The itrc doc id is A5032674.

Hope this helps.

Regds

Re: swinstall through firewall

Tim Nelson — Mon, 23 May 2005 14:17:22 GMT

Thanks Sanjay. That worked. I neglected to put all the service restrictions in the config on the client.

Re: swinstall through firewall

Tim Nelson — Mon, 23 May 2005 14:18:39 GMT

Other than restricting the ports on the server side include all restrictions in /var/adm/sw/defaults to restrict all service requests on the client side.
swcopy.rpc_binding_info = ncacn_ip_tcp:[2121]
swremove.rpc_binding_info = ncacn_ip_tcp:[2121]
swconfig.rpc_binding_info = ncacn_ip_tcp:[2121]
swverify.rpc_binding_info = ncacn_ip_tcp:[2121]
swlist.rpc_binding_info = ncacn_ip_tcp:[2121]
swreg.rpc_binding_info = ncacn_ip_tcp:[2121]
swacl.rpc_binding_info = ncacn_ip_tcp:[2121]
swjob.rpc_binding_info = ncacn_ip_tcp:[2121]