Re: firewalld configuration for EPICS?

[Goetz Pfeiffer via Tech-talk <tech-talk at aps.anl.gov>]

On 4/3/19 11:51 AM, Dirk Zimoch via Tech-talk wrote:
> Hi
>
> Does anyone already have a firewalld configuration to allow Channel Access? I.e. something like a /usr/lib/firewalld/services/epics.xml file?
>
> Dirk

Hello Dirk,

I just struggled with firewalld in order to make EPICS clients and servers work and I found this solution for the command line:

Settings for EPICS clients:

  firewall-cmd --add-rich-rule="rule source-port port=5064 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5064 protocol=udp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5065 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5065 protocol=udp accept"

Additional settings for EPICS servers:

  firewall-cmd --add-rich-rule="rule port port=5064 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule port port=5064 protocol=udp accept"
  firewall-cmd --add-rich-rule="rule port port=5065 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule port port=5065 protocol=udp accept"

Make changes permanent:

  firewall-cmd --runtime-to-permanent

Greetings

  Goetz

Attachment: signature.asc
Description: OpenPGP digital signature