On Mon, 2018-02-26 at 09:05 +0100, François Patte wrote:
Le 26/02/2018 à 05:35, Gordon Messmer a écrit :
> On 02/25/2018 10:42 AM, François Patte wrote:
> > I opened firefox on one computer and miracle: the printer attached to
> > the other computer is discovered and cups admin interface asks me if I
> > want to add this printer. Nice: the job is easy!!*But* this does not
> > work at all!!
>
>
> If I recall correctly, discovery is a matter of multicast DNS
> announcement. Since the source announces the printer, firewall rules
> don't need to be adjusted to allow that. However, you do need to adjust
> firewall rules to allow incoming IPP connections. Have you done that?
iptables -L
Chain INPUT
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT tcp -- anywhere anywhere tcp spt:ipp
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT udp -- anywhere anywhere udp spt:ipp
Chain OUTPUT
ACCEPT tcp -- anywhere anywhere tcp spt:ipp
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT udp -- anywhere anywhere udp spt:ipp
ACCEPT udp -- anywhere anywhere udp dpt:ipp
_______________________________________________
A working Centos 7.4 server but maybe ...
systemctl status cups-browsed.service ???????
/etc/cups/cups-browsed.conf
# Which protocols will we use to discover printers on the network?
# Can use DNSSD and/or CUPS, or 'none' for neither.
BrowseRemoteProtocols dnssd cups
# Which protocols will we use to broadcast shared local printers to the network?
# Can use DNSSD and/or CUPS, or 'none' for neither.
# Only CUPS is actually supported, as DNSSD is done by CUPS itself (we ignore
# DNSSD in this directive).
# BrowseLocalProtocols none --------->>>>>>>> Default
?????????
BrowseLocalProtocols cups
# Settings of this directive apply to both BrowseRemoteProtocols and
# BrowseLocalProtocols.
# Can use DNSSD and/or CUPS, or 'none' for neither.
# BrowseProtocols none
BrowseProtocols dnssd cups
//-----------------------------------------
Also
#Multicast DNS Port mdns/5353 (for CUPS)
iptables -A INPUT -m state --state NEW -m tcp -p tcp -d $DEST --dport 5353 -s $SOURCE -j
ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp -d $DEST --dport 5353 -s $SOURCE -j
ACCEPT
#CUPS port ipp/631
iptables -A INPUT -m state --state NEW -m tcp -p tcp -d $DEST --dport 631 -s $SOURCE -j
ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp -d $DEST --dport 631 -s $SOURCE -j
ACCEPT
John