I have a remote rsync backup to a server running over ssh, using NAT to specify a non-standard high numbered port on the router.
Is it ok to only open the port on the router, and the ssh port on the server, to TCP connections, or is use of UDP required?