Note that this also means that your PLC's won't be able to initiate connections to the "machine". This is fine if all communication is initiated from the "machine" (because the firewall is stateful), but if not, you're better off doing what @jdsilva said. E.g. PLC needs to get a new firmware over TFTP from the "machine".
... View more