On Jul 1, 2004, at 19:52, Stapleton, Mark wrote:

From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On
Behalf Of Zoltan Forray/AC/VCU

FWIW, when doing port blocking/filtering, 1500 & 1501 should be open
to
allow TSM through, both directions.

<pedantic_mode>

From page 21 of the _Backup-Archive Clients Installation and User's
Guide for Windows, Version 5 Release 2_:
"For the client scheduler [set] in prompted mode, it is unnecessary to
open any ports on the firewall. If you set the sessioninitiation option
to serveronly, the client will not attempt to contact the server. All
sessions will be initiated by server prompted scheduling on the port
defined on the client with the tcpclientport option. The
sessioninitiation option only affects the behavior of the client
scheduler running in the prompted mode."

</pedantic_mode>

which basically means that if you actually follow this advise, you will
be able to do scheduled backups, but never be able to do unscheduled
restores, thus rendering your TSM server quite worthless.

OTOH, if you do the opposite, you can have your client behind a
firewall not opening any ports to the TSM server and you only need
TCPPORT (1500 per default) open at the server end for your clients.

--
Mark Stapleton

--
Met vriendelijke groeten,

Remco Post

SARA - Reken- en Netwerkdiensten                      http://www.sara.nl
High Performance Computing  Tel. +31 20 592 8008    Fax. +31 20 668 3167

"I really didn't foresee the Internet. But then, neither did the
computer industry. Not that that tells us very much of course - the
computer industry didn't even foresee that the century was going
to end."                                       -- Douglas Adams