Mailinglist Archive: opensuse (1487 mails)

[Johannes Meixner <jsmeix@xxxxxxx>]

Hello,

On Jul 26 20:13 Carlos F Lange wrote:
> In the Firewall Configuration of YaST, the list of services to allow for the
> External Zone no longer contains "cups".
> Instead, When setting up the Printer Configuration to accept printer
> announcements from CUPS servers, YaST pops up a recommendation to open UDP
> port 631 in the firewall.

There should be no recommendation to open any port in the firewall.
But the current popup texts could be misunderstood to do it.
Therefore I filed
https://bugzilla.novell.com/show_bug.cgi?id=627799

> Any sane reason to make this process less convenient?

This is intentionally to avoid that almost all normal users
open a security hole because in the usual network environments,
the IPP port should never be opened for the EXT zone, see
http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings

Additionally you may have a look at
https://bugzilla.novell.com/show_bug.cgi?id=610327


Kind Regards
Johannes Meixner
--
SUSE LINUX Products GmbH, Maxfeldstrasse 5, 90409 Nuernberg, Germany
AG Nuernberg, HRB 16746, GF: Markus Rex
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx