Re: firewalld configuration for EPICS?

[Benjamin Franksen via Tech-talk <tech-talk@aps.anl.gov>]

Am 09.04.19 um 17:18 schrieb Dirk Zimoch via Tech-talk:
> I had not thought of the multiple IOC problem. In this case it is a
> Fedora Linux VME IOC. Unlikely to run multiple IOCs but not impossible.
> 
> I tried it and naively accessing records on IOC 2 does not work when the
> firewall is up. I get  'CAC: Unable to connect because "No route to
> host"' on the client (caget) even when using the broadcast address.

Ah, I didn't understand that you were talking about firewall on the
machine that runs the IOC(s). My remark was about firewall on the CA client.

Anyway, I thought that services such as a web server use dynamically
assigned (ephemeral) ports for the actual data exchange and the
well-known port only to initiate communication. I guess a firewall can
be configured to allow connections to a web server, so shouldn't it be
possible to do the same for (multiple) IOCs?

Cheers
Ben

Attachment: signature.asc
Description: OpenPGP digital signature