Experimental Physics and
Industrial Control System

Goetz Pfeiffer via Tech-talk <tech-talk at aps.anl.gov> · Mon, 24 Feb 2020 14:09:57 +0100

On 4/3/19 11:51 AM, Dirk Zimoch via Tech-talk wrote:
> Hi
>
> Does anyone already have a firewalld configuration to allow Channel Access? I.e. something like a /usr/lib/firewalld/services/epics.xml file?
>
> Dirk

Hello Dirk,

I just struggled with firewalld in order to make EPICS clients and servers work and I found this solution for the command line:

Settings for EPICS clients:

  firewall-cmd --add-rich-rule="rule source-port port=5064 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5064 protocol=udp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5065 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule source-port port=5065 protocol=udp accept"

Additional settings for EPICS servers:

  firewall-cmd --add-rich-rule="rule port port=5064 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule port port=5064 protocol=udp accept"
  firewall-cmd --add-rich-rule="rule port port=5065 protocol=tcp accept"
  firewall-cmd --add-rich-rule="rule port port=5065 protocol=udp accept"

Make changes permanent:

  firewall-cmd --runtime-to-permanent

Greetings

  Goetz

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System