Re: IPSEC policy for RCMD

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/26/04

  • Next message: Jordan: "Security Issues with NT4 being no longer supported." 
    Date: Thu, 25 Nov 2004 22:38:42 -0700

    I really have not look at non-Unix rcmd specifics, but as it
    appeared with rpc, I would assume the Windows implementation
    is wholely dependent on rpc. Rpc uses ephemeral ports, but you
    can use a registry setting to define a specific range of ports that it
    will then use. Doing this will have some implications for those
    machines in the larger environment in which they operate, but you
    may be able to use this. 

    -- 
Roger Abell
"Cluster Admin" <Cluster Admin@discussions.microsoft.com> wrote in message
news:A109C01C-6F7E-41A6-AE88-997305BCE9D1@microsoft.com...
> Does anyone know the port and protocol that I would need to specify to
create
> an IPSEC policy for the Windows RCMD service? I am using RCMD on a 7 node
> cluster to perform remote script execution of VSS snapshots and need this
to
> be more secure. Currently I am remotely starting and stopping the RCMD
> service on the target before script execution, but would like to
additionally
> use IPSEC policy to zone the RCMD service port to permit only specific
source
> hosts. Also, is the RCMD service port configurable?
>
> Thanks,
> Jim
  • Next message: Jordan: "Security Issues with NT4 being no longer supported."