Search requires consent for the Functional category.

The Revolution Pi System is protected by a firewall (firewalld)[1]. The firewall blocks unauthorized access while allowing data traffic through the necessary ports. The port configurations are defined in the respective packages.

  • Cockpit: ports 80 and 443

  • Node-RED: TCP port 41880

  • RevPi Apache Webserver: port 41443

Configuring the Firewall via Cockpit #

▷ Start Cockpit.

▷ Open the Cockpit menu Networking.

▷ In the section Firewall, select Edit rules and zones.

▷ Select Add services.

▷ Add firewall rules for additional services to allow the corresponding standard ports:

  • revpi-codesys for the CODESYS Development System

  • revpi-modbus-default for Modbus server

  • opcua-server-default for OPC UA Server

▷ Select Custom Ports for additional ports that are not covered by the standard ports mentioned above.

Configuring the Firewall via Terminal #

▷ Log in to the RevPi via a terminal.

Command Function

firewall-cmd

Opens the firewall configuration.

sudo firewall-cmd --permanent --add-service=revpi-codesys

Adds standard ports for the connection to the CODESYS Development System.

sudo firewall-cmd --permanent --add-service=revpi-modbus-default

Adds standard ports for Modbus server.

sudo firewall-cmd --permanent --add-service=opcua-server-default

Adds standard ports for OPC UA server.

sudo firewall-cmd --permanent --add-port=<name>

Adds additional ports that are not covered by the standard ports listed above.

sudo firewall-cmd --reload

Reloads the firewall (necessary after changing the firewall configuration).

Further Resources #

1. The firewall is pre-installed as of RevPi Bookworm (08/2025).