One thing you could try would be to setup a port-forwarding ssh for port 873 and run an rsync daemon setup. The daemon mode does not use rsh as you thought: it uses its own (unencrypted without external help) sockets connections. ..wayne..