Re: Firewall blocks printing for no(???) reason
Rolf Pedersen <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
Mark Neidorff wrote: > On Saturday 08 November 2008 12:43 pm, Rolf Pedersen wrote: > >> Mark Neidorff wrote: >> >>> Hi, >>> >>> (I hope someone is still listening here) >>> >>> I have a Netgear PS101 print server. My printing system uses CUPS. The >>> print server is on 192.168.1.200 and it is defined as a zone in GD. I >>> have allowed IPP and LPD between the local zone and the print server. My >>> log still shows this block when I try to print: >>> >>> Nov 8 10:03:29 neidorff kernel: DROPPED IN=eth1 OUT= >>> MAC=00:04:5a:4b:e5:8d:00:c0:02:a6:f0:97:08:00SRC=192.168.1.200 >>> DST=192.168.1.1 LEN=44 TOS=0x00 PREC=0x00 TTL=30 ID=454 PROTO=TCP SPT=515 >>> DPT=1022 SEQ=334118 ACK=663096096 WINDOW=1460 RES=0x00 ACK PSH SYN URGP=0 >>> OPT (020405B4) >>> >>> When I (unplug the net and) turn off the firewall, the document prints. >>> What simple thing am I missing? If more information is needed, please >>> let me know, and I'll provide it. >>> >>> Thanks, >>> >>> Mark >>> >> just guessing, >> >> SPT=515 >> >> >> [rolf@localhost ~]$ grep 515 /etc/services >> printer 515/tcp spooler # line printer spooler >> printer 515/udp spooler # line printer spooler >> >> There is a 'line printer spooler' under 'Network' using 515. >> >> >> Rolf >> > > Yes, those lines are in /etc/services. Why are they causing me a problem? > > Is the solution to comment them out? If so, I'd like to understand why. > > Thanks, > > Mark Sorry, you say "I have allowed IPP and LPD.." Your kernel message shows a port being accessed: SPT=515 (source port) /etc/services is a list of services and ports they use. No need to comment anything, there. In protocols, in the guarddog firewall, there is "line printer spooler" that, if you turn on 'Show advanced protocol help' in the Advanced tab, you can see uses port 515. I did not see LPD in protocols but I imagine you have allowed "line printer spooler", instead, already. So, I don't know. If you have allowed line printer spooler, maybe make a rule for the other port? DPT=1022 (destination port) Rolf ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/