topic Re: rsh, nfs and firewall in Operating System - HP-UX

rsh, nfs and firewall

Admin.SIF — Fri, 20 May 2005 15:15:33 GMT

Hello,
Which ports should I open to allow rsh through a firewall?
What about NFS ? I read something about dynamic ports for mountd so I don't know if we can make nfs secure through a firewall by managing ports by the firewall.
Thank you

Re: rsh, nfs and firewall

Sanjay_6 — Fri, 20 May 2005 15:19:12 GMT

Hi,

For NFS / Firewall, try this link,

http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0x057450011d20d6118ff40090279cd0f9%2C00.html&admit=716493758+1116620201052+28353475

Hope this helps.

Regds

Re: rsh, nfs and firewall

Bill Hassell — Sat, 21 May 2005 08:54:16 GMT

If you are running HP-UX, rsh is not the remote shell coomand (as it is on some other Unix flavors), the command is remsh. You are correct that these services (remsh, rcp, rlogin, rexec and NFS) cannot be made secure through a firewall. They are actually not secure in a local network. It is much safer to implement Secure Shell (ssh with scp and sftp) for a secure connection. ssh can be setup on a different port (other than 22) for even more security.

Re: rsh, nfs and firewall

Admin.SIF — Tue, 24 May 2005 14:09:48 GMT

Thank you, I appreciate your help. I forgot to specify that we use Tru64 Unix.
For NFS, it was working for more than 2 years. Recently we replaced the protocol udp by tcp and did a shutdown/reboot of the NFS server and since that reboot, it doesn't work any more.
For rsh, we have opened the port 514 but the command rsh from the other host come with port 1022 or 1023 and is refused. I think that they use ssh instead of rsh.
Any idee please?