Network Communication: Closing Open Ports

Hello Community,

we have integrated our UR systems into our company network.
However, we found out that this is not a good solution.

By default, the UR systems have many ports open,
which in our opinion are not always necessary.

We have discovered the following ports:
PORT STATE SERVICE
22/tcp open ssh
502/tcp open mbap
6000/tcp open X11
29999/tcp open bingbang
30001/tcp open pago-services1
30002/tcp open pago-services2
30003/tcp open amicon-fpsu-ra
30004/tcp open amicon-fpsu-s

How can we close the ports from 6000 to 30004?

Regards
Dirk

If you’re using an (updated) e-series robot, you might be able to enter settings (Security → Services) and disable the services associated with the ports (RTDE etc).
I don’t have a robot with me, so I don’t know if they’re all available for disabling in the settings.

Alternatively, you should be able to establish an SSH connection to the robot or using the internal Linux terminal by connecting a USB keyboard to the robot (I don’t remember the hotkey).
You will have to kill the service associated to the port (and stop it from starting again when booting), since it’s the application/service that has opened the port. You can also block the port in the firewall, but it will still show as “open”, I think.

enf>If you’re using an (updated) e-series robot, …
Think our systems are to old…We operate 4 systems UR3/UR5:

2x Robot-Sw: 3.4.2.65
1x Robot-Sw: 3.7.0.40195
1x Robot-Sw: 3.5.1.10661

enf>SSH connection to the robot …
Yes, we can do it.

enf>…kill the service associated to the port…
Not clear for me witch service is responsible.

There’s a command to list all applications using network ressources (or something). I just don’t remember it. If you have a Linux expert, you should consult him. :slight_smile:

1 Like

Found it :wink:

root@ur-2015351735:~# netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2447/X
tcp 0 0 0.0.0.0:30001 0.0.0.0:* LISTEN 2686/URControl
tcp 0 0 0.0.0.0:30002 0.0.0.0:* LISTEN 2686/URControl
tcp 0 0 0.0.0.0:30003 0.0.0.0:* LISTEN 2686/URControl
tcp 0 0 0.0.0.0:30004 0.0.0.0:* LISTEN 2686/URControl
tcp 0 0 0.0.0.0:502 0.0.0.0:* LISTEN 2686/URControl
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2401/sshd
tcp6 0 0 127.0.0.1:6666 :::* LISTEN 2468/java
tcp6 0 0 :::29999 :::* LISTEN 2468/java
tcp6 0 0 :::6000 :::* LISTEN 2447/X
tcp6 0 0 :::22 :::* LISTEN 2401/sshd