Hello, On Aug 4 21:04 Carlos E. R. wrote (shortened):
On 2010-08-03 12:46, Johannes Meixner wrote: ...
But the "external" network is also the internal one in many cases, such as mine.
This is a contradiction in itself and therefore you get trouble how to deal with it.
There is an ADSL router that connects to Internet. Behind there is an internal network, which some prefer to consider as external in the firewall config for extra protection. But it is this one which has to be opened to connect to other machines in the local network.
Your case is described in http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings ---------------------------------------------------------------- When Network Security is Likely to be Doomed ... Save money and use the same network hardware for trusted and non-trusted network traffic and as a consequence pay with an increased likelihood that your network security is doomed and with an increased effort to maintain your network security. ... Use one same "router-box" device for both your trusted internal network and the connection to the Internet. ---------------------------------------------------------------- Please read the whole article. Again and again - as described in http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings There is no longer any kind of firewall protection for a service if you open its port(s) in the firewall. In particular responses as yours prove that I am right not to offer our users a too easy "just one click" way in YaST which removes firewall protection completely from CUPS. Please do not misunderstand me: You are of course still free to open whatever port for whatever firewall zone you like depending on your particular needs. I am only interested to make it not too easy in particular for unexperienced users to open needless security holes. I want to guide our users to a reasonable secure setup and not to just please them with "one click easy going" stuff which makes in the end our users' systems needlessly insecure. Kind Regards Johannes Meixner -- SUSE LINUX Products GmbH, Maxfeldstrasse 5, 90409 Nuernberg, Germany AG Nuernberg, HRB 16746, GF: Markus Rex -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org