swinstall through firewall

[Tim Nelson]

Attempting to use swinstall from a server on DMZ to depot inside the firewall.

exported RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2121-2131]on swinstall host.

set RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2121-2131] in swconfig and restarted swagentd on depot.

updated FW rules to allow ports 2121-2131.

I still get a drop message on the firewall after the 2121-2131 is accepted as the client is still attempting an additional connection of some random 58xxx port.

Any suggestions ?
Thanks in advance.

[Sanjay_6 · Accepted solution]

Hi Tim,

Try this link,

http://www6.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000066918443

The itrc doc id is A5032674.

Hope this helps.

Regds

[Tim Nelson]

Thanks Sanjay. That worked. I neglected to put all the service restrictions in the config on the client.

[Tim Nelson]

Other than restricting the ports on the server side include all restrictions in /var/adm/sw/defaults to restrict all service requests on the client side.
swcopy.rpc_binding_info = ncacn_ip_tcp:[2121]
swremove.rpc_binding_info = ncacn_ip_tcp:[2121]
swconfig.rpc_binding_info = ncacn_ip_tcp:[2121]
swverify.rpc_binding_info = ncacn_ip_tcp:[2121]
swlist.rpc_binding_info = ncacn_ip_tcp:[2121]
swreg.rpc_binding_info = ncacn_ip_tcp:[2121]
swacl.rpc_binding_info = ncacn_ip_tcp:[2121]
swjob.rpc_binding_info = ncacn_ip_tcp:[2121]