Re: Firewall configuration?

[Chris Jacobsen <chris.j.jacobsen@gmail.com>]

Thanks - this seems to work!  I used cainfo to get the host names of  
the IOCs we were trying to reach, and traceroute to get their IP  
numbers.  Setting EPICS_CA_ADDR_LIST to point to these two IOCs  
specifically seems to let everything work with the firewall on.   
Thanks!!!

On Feb 5, 2009, at 4:48 PM, Mark Rivers wrote:

> Hi Chris,
>
> I had a similar problem with the standard BNL firewall on Windows  
> (Trend
> I think?).  I think the problem was as follows:
>
> - EPICS sends a multicast message to find the PVs on a port you have
> enabled
>
> - The client responds, but because the outgoing message was a  
> multicast
> the incoming port was apparently not opened for that server.  I proved
> this by setting EPICS_CA_ADDR_LIST to specifically include the IP
> address of the server, and then it worked.  You could try that.
>
> Mark
>
>
> -----Original Message-----
> From: tech-talk-bounces@aps.anl.gov
> [mailto:tech-talk-bounces@aps.anl.gov] On Behalf Of Chris Jacobsen
> Sent: Thursday, February 05, 2009 3:15 PM
> To: tech-talk@aps.anl.gov
> Subject: Firewall configuration?
>
> Hi - I'd like to have a firewall configured on my linux system but
> when I turn it on then I get a timeout when accessing EPICS variables
> on a remote system.  I thought it would be sufficient to enable TCP
> and UDP access on ports 5064 and 5065, since I'm running with a
> "standard" EPICS build on the latest release.  Can anyone suggest what
> else I need to set in a firewall configuration to allow EPICS to work?
>
> Thanks, Chris Jacobsen