Fix EPICS role with Firewall at CS (#71) · Issues · las-it-organisation / 32-0-IT instructions and rules / ansible

Fix EPICS role with Firewall at CS

CSS does not behave right due to firewall issues.

Setup: CS + ANKA-VPN

Problem: PVs are not shown as connected, though caget works.

Workaround:

sudo firewall-cmd --add-port=5064/udp --permanent
sudo firewall-cmd --add-source-port=5064/udp --permanent
sudo systemctl reload firewalld

Ideas for better fixes: Add ANKA-VPN to internal-zone. Or do a similar thing to the iptables rule:

iptables -I INPUT 1 -m state --state ESTABLISHED,RELATED -j ACCEPT

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information