LPR ephemeral port problem (below port 1024!)

Tim Waugh twaugh at redhat.com
Mon Nov 29 15:27:11 UTC 2004


On Mon, Nov 29, 2004 at 10:00:44AM -0500, Dr. Michael J. Chudobiak wrote:

> I just updated a server from FC1 to FC3 over the weekend. Everything 
> went fine, except that I can no longer communicate with my Netgear PS110 
> print servers, because the LPR protocol is being blocked. This is 
> happening because the firewall (iptables built by Guarddog) on my server 
> is set to block communications that do not use ports 1024-5999 as the 
> ephemeral ports. For some reason, ports below 1024 are being used when 
> attempting to print,

RFC 1179 says:

   The source port must be in the range 721 to 731, inclusive.

The CUPS lpd backend seems to try any priveleged port, unless you set
the "Strict RFC1179 compliance" check button on the queue type page --
in which case it really will be 721---731.

Tim.
*/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041129/8c8361ff/attachment-0001.sig>


More information about the fedora-list mailing list