Experimental Physics and
Industrial Control System

Eric Norum <[email protected]> · Thu, 4 Nov 2010 09:09:40 -0700

On Nov 4, 2010, at 8:48 AM, Matthieu Bec wrote:

> 
> Hi Mark,
> 
> I left it as an unanswered question but came to the conclusion the udp destination needed to be widely open:
> 
> # anything on VLAN65:
> -A INPUT -m state --state NEW -m udp -p udp -s 172.16.65.0/24 --dport 5000:65535 -j ACCEPT
> 
> get 'wireshark' if you cannot find ethereal for your distribution.
> 
> Matthieu
> 

This works, but I'm pretty sure that opening things up to that extent is going to get my machine blacklisted....
I presume that what's happening is that my client is getting bound to some arbitrary UDP port to which the IOC then replies.
I'm kind of surprised that this hasn't been an issue for others in the past.

-- 
Eric Norum
[email protected]

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System