https://forge.codesys.com/forge/talk/Engineering/thread/4a26eddbf8/2021-10-20T07:49:49.215000ZRecent posts to CodeSys 3.5 / CodeSysControl 4.0.1.0 - Which ports are used for "Scan Network"2021-10-20T07:49:49.215000Z2021-10-20T07:49:49.215000Zlefishhttps://forge.codesys.com/u/lefish/https://forge.codesys.com5b7c6ecf7af64bc1976c9dfa9ac3c3ac828843e3

<div class="markdown_content"><p>I can confirm these ports.</p> <p>Thank you very much!</p></div>

2021-10-18T12:35:46.970000Z2021-10-18T12:35:46.970000Zsgronchihttps://forge.codesys.com/u/sgronchi/https://forge.codesys.comb3452108ab7d78f4bc5eca32fc562b285c16e61c

<div class="markdown_content"><p>TCP ports are 11740 through 11743 (all four), UDP ports are 1740 through 1743.<br/> <a href="https://help.codesys.com/webapp/_cds_cmd_login;product=codesys;version=3.5.16.0" rel="nofollow">https://help.codesys.com/webapp/_cds_cmd_login;product=codesys;version=3.5.16.0</a></p></div>

2021-10-18T11:55:05.292000Z2021-10-18T11:55:05.292000Zlefishhttps://forge.codesys.com/u/lefish/https://forge.codesys.comf03d729f02e2848ddf246a3229ca9971c7ec53be

<div class="markdown_content"><p>Hi there,</p> <p>I have set up a firewall on my RPi by setting iptables.</p> <p>This is my configuration:</p> <div class="codehilite"><pre><span></span><span class="err">pi@tbrpi:~ $ sudo iptables -S</span> <span class="err">-P INPUT DROP</span> <span class="err">-P FORWARD ACCEPT</span> <span class="err">-P OUTPUT ACCEPT</span> <span class="err">-A INPUT -i lo -j ACCEPT</span> <span class="err">-A INPUT -p tcp -m tcp --dport 80 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -p tcp -m tcp --dport 443 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -p tcp -m tcp --dport 8080 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -p tcp -m tcp --dport 5970 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -p udp -m udp --dport 123 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 22 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 22 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 22 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 631 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 1880 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 1880 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 1880 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 11740 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 11740 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 11740 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 11743 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 11743 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 11743 -j ACCEPT</span> <span class="err">-A INPUT -s 127.0.0.0/8 -p tcp -m tcp --dport 31421 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 1217 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 1217 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 1217 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 4840 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 4840 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 4840 -j ACCEPT</span> <span class="err">-A INPUT -s 127.0.0.0/8 -p tcp -m tcp --dport 4840 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 5900 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 5900 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 5900 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 3389 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 3389 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 3389 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 3350 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 3350 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 3350 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p udp -m udp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p udp -m udp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 53 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p udp -m udp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p udp -m udp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -s 192.168.178.0/24 -p tcp -m tcp --dport 162 -j ACCEPT</span> <span class="err">-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT</span> </pre></div> <p>pinging from my Windows 10 Dev-PC works:</p> <div class="codehilite"><pre><span></span><span class="k">C</span><span class="p">:</span><span class="err">\</span><span class="n">Users</span><span class="err">\</span><span class="n">myPC</span><span class="o">&gt;</span><span class="n">ping</span> <span class="n">tbrpi</span> <span class="n">Ping</span> <span class="n">wird</span> <span class="n">ausgeführt</span> <span class="n">für</span> <span class="n">tbrpi</span><span class="p">.</span><span class="n">lan</span> <span class="p">[</span><span class="mi">192</span><span class="p">.</span><span class="mi">168</span><span class="p">.</span><span class="mi">1</span><span class="p">.</span><span class="mi">224</span><span class="p">]</span> <span class="n">mit</span> <span class="mi">32</span> <span class="n">Bytes</span> <span class="n">Daten</span><span class="p">:</span> <span class="n">Antwort</span> <span class="n">von</span> <span class="mi">192</span><span class="p">.</span><span class="mi">168</span><span class="p">.</span><span class="mi">1</span><span class="p">.</span><span class="mi">224</span><span class="p">:</span> <span class="n">Bytes</span><span class="o">=</span><span class="mi">32</span> <span class="n">Zeit</span><span class="o">=</span><span class="mi">22</span><span class="n">ms</span> <span class="n">TTL</span><span class="o">=</span><span class="mi">64</span> <span class="n">Antwort</span> <span class="n">von</span> <span class="mi">192</span><span class="p">.</span><span class="mi">168</span><span class="p">.</span><span class="mi">1</span><span class="p">.</span><span class="mi">224</span><span class="p">:</span> <span class="n">Bytes</span><span class="o">=</span><span class="mi">32</span> <span class="n">Zeit</span><span class="o">=</span><span class="mi">2</span><span class="n">ms</span> <span class="n">TTL</span><span class="o">=</span><span class="mi">64</span> <span class="n">Antwort</span> <span class="n">von</span> <span class="mi">192</span><span class="p">.</span><span class="mi">168</span><span class="p">.</span><span class="mi">1</span><span class="p">.</span><span class="mi">224</span><span class="p">:</span> <span class="n">Bytes</span><span class="o">=</span><span class="mi">32</span> <span class="n">Zeit</span><span class="o">=</span><span class="mi">2</span><span class="n">ms</span> <span class="n">TTL</span><span class="o">=</span><span class="mi">64</span> <span class="n">Ping</span><span class="o">-</span><span class="n">Statistik</span> <span class="n">für</span> <span class="mi">192</span><span class="p">.</span><span class="mi">168</span><span class="p">.</span><span class="mi">1</span><span class="p">.</span><span class="mi">224</span><span class="p">:</span> <span class="n">Pakete</span><span class="p">:</span> <span class="n">Gesendet</span> <span class="o">=</span> <span class="mi">3</span><span class="p">,</span> <span class="n">Empfangen</span> <span class="o">=</span> <span class="mi">3</span><span class="p">,</span> <span class="n">Verloren</span> <span class="o">=</span> <span class="mi">0</span> <span class="p">(</span><span class="mi">0</span><span class="o">%</span> <span class="n">Verlust</span><span class="p">),</span> <span class="n">Ca</span><span class="p">.</span> <span class="n">Zeitangaben</span> <span class="k">in</span> <span class="n">Millisek</span><span class="p">.:</span> <span class="n">Minimum</span> <span class="o">=</span> <span class="mi">2</span><span class="n">ms</span><span class="p">,</span> <span class="n">Maximum</span> <span class="o">=</span> <span class="mi">22</span><span class="n">ms</span><span class="p">,</span> <span class="n">Mittelwert</span> <span class="o">=</span> <span class="mi">8</span><span class="n">ms</span> </pre></div> <p>It also works to manually add the RPi Hostname in CodeSys:</p> <p><img alt='CodeSys "Manually"' src="[https://i.ibb.co/ZT7PVZW/manuallyadded.png"/></p> <p>What does not work is to scan the network for the same tbrpi device.</p> <p>If I define default rule </p> <div class="codehilite"><pre><span></span><span class="err">-P INPUT ACCEPT </span> </pre></div> <p>in iptables, then everything works as expected.</p> <p>Which additional ports do I need to open?</p> <p>Thank you!</p> <p>BR<br/> LeFish</p></div>