Current File : //usr/share/cups/doc-root/help/firewalls.html
<!DOCTYPE html>
<html>
<!-- SECTION: Getting Started -->
<head>
<title>Firewalls</title>
<link rel="stylesheet" type="text/css" href="../cups-printable.css">
</head>
<body>
<h1 class="title">Firewalls</h1>
<p>This help document describes the ports that CUPS uses so that firewall administrators can allow traffic used for printing.</p>
<h2 class="title" id="SHARING">Ports Used for Printer Sharing</h2>
<p>Table 1 lists the ports that are used for IPP printer sharing via CUPS.</p>
<div class="table"><table summary="Ports Used for IPP Printer Sharing">
<caption>Table 1: Ports Used for IPP Printer Sharing</caption>
<thead>
<tr><th>(Destination) Port</th><th>TCP/UDP</th><th>Direction</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>53 (DNS)</td><td>TCP/UDP</td><td>OUT</td><td>Domain Name System lookups and service registrations.</td></tr>
<tr><td>631 (IPP/IPPS)</td><td>TCP</td><td>IN</td><td>Internet Printing Protocol requests and responses (print jobs, status monitoring, etc.)</td></tr>
<tr><td>5353 (mDNS)</td><td>UDP</td><td>IN+OUT</td><td>Multicast DNS lookups and service registrations.</td></tr>
</tbody>
</table></div>
<p>Table 2 lists the ports that are used for SMB (Windows) printer sharing, typically via the Samba software.</p>
<div class="table"><table summary="Ports Used for SMB Printer Sharing">
<caption>Table 2: Ports Used for SMB Printer Sharing</caption>
<thead>
<tr><th>(Destination) Port(s)</th><th>TCP/UDP</th><th>Direction</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>137 (WINS)</td><td>UDP</td><td>IN+OUT</td><td>Windows Internet Naming Service (name lookup for SMB printing).</td></tr>
<tr><td>139 (SMB)</td><td>TCP</td><td>IN</td><td>Windows SMB printing.</td></tr>
<tr><td>445 (SMBDS)</td><td>TCP</td><td>IN+OUT</td><td>Windows SMB Domain Server (authenticated SMB printing).</td></tr>
</tbody>
</table></div>
<h2 class="title" id="PRINTERS">Ports Used for Network Printers</h2>
<p>Table 3 lists the ports for outgoing network traffic that are used for network printers.</p>
<blockquote><b>Notes:</b>
<ol>
<li>DNS and mDNS are used for all printing protocols except SMB.</li>
<li>SNMP is used to provide status and supply level information for AppSocket and LPD printers.</li>
</ol>
</blockquote>
<div class="table"><table summary="Outgoing Ports Used for Network Printers">
<caption>Table 3: Outgoing Ports Used for Network Printers</caption>
<thead>
<tr><th>(Destination) Port(s)</th><th>TCP/UDP</th><th>Description</th></tr>
</thead>
<tbody>
<tr><td>53 (DNS)</td><td>TCP/UDP</td><td>Domain Name System lookups.</td></tr>
<tr><td>137 (WINS)</td><td>UDP</td><td>Windows Internet Naming Service (name lookup for SMB printing).</td></tr>
<tr><td>139 (SMB)</td><td>TCP</td><td>Windows SMB printing.</td></tr>
<tr><td>161 (SNMP)</td><td>UDP</td><td>SNMP browsing (broadcast) and status monitoring (directed to printer IP address).</td></tr>
<tr><td>443 (IPPS)</td><td>TCP</td><td>Internet Printing Protocol requests and responses (print jobs, status monitoring, etc.)</td></tr>
<tr><td>445 (SMBDS)</td><td>TCP</td><td>Windows SMB Domain Server (authenticated SMB printing).</td></tr>
<tr><td>515 (LPD)</td><td>TCP</td><td>Line Printer Daemon (LPD/lpr) print job submission and status monitoring.</td></tr>
<tr><td>631 (IPP/IPPS)</td><td>TCP</td><td>Internet Printing Protocol requests and responses (print jobs, status monitoring, etc.)</td></tr>
<tr><td>5353 (mDNS)</td><td>UDP</td><td>Multicast DNS lookups.</td></tr>
<tr><td>9100-9102</td><td>TCP</td><td>Raw print data stream (AppSocket/JetDirect).</td></tr>
</tbody>
</table></div>
</body>
</html>
Mini Shell