Re: rshell and iptables
On Fri, Oct 12, 2001 at 04:01:48PM -0700, Greg Hunt wrote:
> Hi, I'm trying to get rshell working on a server that's locked
> down pretty tight with iptables. I had to allow access to port
> 514 (shell) from the host that will be connecting to it, but I
> also had to allow access to port 1023 in order to get it to
> work. I'm thinking this port is chosen based on some kind of
> negotiation (like ftp maybe?). I'm worried that if more than
> one rsh process is going on at once I will need to open up
> some other ports (probably 1022,1021, etc?). Anyone know for
> sure what the deal with rsh is? I looked in the man page and
> couldn't find anything.
As someone else said, why not use SSH?
The r tools use a low numbered source port as a crude sort of
authentication in addition to the .rhosts stuff. I seem to
remember something about the rsh server connecting back to the
client for stderr, though. That might be the port 1023 you're
talking about. I don't know if it needs just 1023 or if other
ports would be needed by more than one rsh connection.
--
Michael Wood
mwood@its.uct.ac.za
Reply to: