Changes between Version 4 and Version 5 of SfaInstallGEC9Demos

Timestamp:

10/14/10 16:58:37 (14 years ago)

Author:

chaos@bbn.com

Comment:

--

SfaInstallGEC9Demos

@@ -150 +150 @@
 }}}
 
+= Step 8: Configure host firewall to allow SFA =
+
+If your myplc is running iptables, you will need to add rules to allow inbound connections to the `sfa-server.py` daemon, which listens on three ports.  Add the following rules to `/etc/sysconfig/iptables`:
+{{{
+-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 12345 -j ACCEPT
+-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 12346 -j ACCEPT
+-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 12347 -j ACCEPT
+}}}
+placing them immediately ''before'' the default reject rule:
+{{{
+-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
+}}}
+
+Then restart iptables:
+{{{
+sudo service iptables restart
+}}}
+
 = Outcome =