Experimental Physics and
Industrial Control System

Chris Jacobsen <[email protected]> · Fri, 6 Feb 2009 17:14:20 -0500

Thanks - this seems to work! I used cainfo to get the host names of

the IOCs we were trying to reach, and traceroute to get their IP

numbers. Setting EPICS_CA_ADDR_LIST to point to these two IOCs

specifically seems to let everything work with the firewall on.

Thanks!!!

On Feb 5, 2009, at 4:48 PM, Mark Rivers wrote:

Hi Chris,

I had a similar problem with the standard BNL firewall on Windows

(Trend

I think?).  I think the problem was as follows:

- EPICS sends a multicast message to find the PVs on a port you have
enabled

- The client responds, but because the outgoing message was a

multicast

the incoming port was apparently not opened for that server.  I proved
this by setting EPICS_CA_ADDR_LIST to specifically include the IP
address of the server, and then it worked.  You could try that.

Mark

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Chris Jacobsen
Sent: Thursday, February 05, 2009 3:15 PM
To: [email protected]
Subject: Firewall configuration?

Hi - I'd like to have a firewall configured on my linux system but
when I turn it on then I get a timeout when accessing EPICS variables
on a remote system.  I thought it would be sufficient to enable TCP
and UDP access on ports 5064 and 5065, since I'm running with a
"standard" EPICS build on the latest release.  Can anyone suggest what
else I need to set in a firewall configuration to allow EPICS to work?

Thanks, Chris Jacobsen

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System