rsh, nfs and firewall

[Admin.SIF]

Hello,
Which ports should I open to allow rsh through a firewall?
What about NFS ? I read something about dynamic ports for mountd so I don't know if we can make nfs secure through a firewall by managing ports by the firewall.
Thank you

[Sanjay_6]

Hi,

For NFS / Firewall, try this link,

http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0x057450011d20d6118ff40090279cd0f9%2C00.html&admit=716493758+1116620201052+28353475

Hope this helps.

Regds

[Bill Hassell]

If you are running HP-UX, rsh is not the remote shell coomand (as it is on some other Unix flavors), the command is remsh. You are correct that these services (remsh, rcp, rlogin, rexec and NFS) cannot be made secure through a firewall. They are actually not secure in a local network. It is much safer to implement Secure Shell (ssh with scp and sftp) for a secure connection. ssh can be setup on a different port (other than 22) for even more security.

[Admin.SIF]

Thank you, I appreciate your help. I forgot to specify that we use Tru64 Unix.
For NFS, it was working for more than 2 years. Recently we replaced the protocol udp by tcp and did a shutdown/reboot of the NFS server and since that reboot, it doesn't work any more.
For rsh, we have opened the port 514 but the command rsh from the other host come with port 1022 or 1023 and is refused. I think that they use ssh instead of rsh.
Any idee please?