I think, rsh is quite obsolete

[Dave Mitchell]

On Tue, Nov 14, 2006 at 12:40:10AM +0100, Krzysztof Halasa wrote:
> Just as with NFS for example. Is NFS evil too?

Basic NFS is pretty evil. Totally insecure.

> > It won't work with firewalls.
> 
> Of course it does. It can't work with dynamic NATs as it uses IP
> (and reserved TCP port) for access check but rsh is just a simple
> TCP connection to a well-known port.

The rsh protocol requires the server to make a second TCP connection back
to a low-numbered ephemeral port specified by the client, for the stderr
channel. If you haven't got a stateful, inspecting firewall, you're hosed.

-- 
The crew of the Enterprise encounter an alien life form which is
suprisingly neither humanoid nor made from pure energy.
    -- Things That Never Happen in "Star Trek" #22