Re: Printer & localhost:631

From: Jeff Stevens (jeff_at_mossycup.com)
Date: 08/18/05

  • Next message: David R. Litwin: "Re: Apt-Get udev and the Newest Kernel (SOLVED)" 
    To: Charlie <aries-tao@bigpond.com>
Date: Wed, 17 Aug 2005 21:01:34 -0700

    My thoughts are (1) verify cupsd.conf, (2) verify daemon is listening,
    (3) verify my firewall is in fact off...

    Some "important looking" sections from my cupsd.conf:

    <snip note="Just shy of 50% through">

    ########
    ######## Network Options
    ########

    #
    # Ports/addresses that we listen to. The default port 631 is reserved
    # for the Internet Printing Protocol (IPP) and is what we use here.
    #
    # You can have multiple Port/Listen lines to listen to more than one
    # port or address, or to restrict access:
    #
    # Port 80
    # Port 631
    # Listen hostname
    # Listen hostname:80
    # Listen hostname:631
    # Listen 1.2.3.4
    # Listen 1.2.3.4:631
    #
    # NOTE: Unfortunately, most web browsers don't support TLS or HTTP
    Upgrades
    # for encryption. If you want to support web-based encryption you'll
    # probably need to listen on port 443 (the "https" port...)
    #
    # NOTE 2: In order for the command-line and web interfaces to work, you
    # must have at least one Port or Listen line that allows access from the
    # local loopback address (localhost).
    #

    #Port 80
    #Port 443
    Port 631

    </snip>

    <snip note="Near the very end">

    <Location /admin>
    #
    # You definitely will want to limit access to the administration
    functions.
    # The default configuration requires a local connection from a user who
    # is a member of the system group to do any admin tasks. You can change
    # the group name using the SystemGroup directive.
    #

    AuthType Basic
    AuthClass System

    ## Restrict access to local domain
    Order Deny,Allow
    Deny From All
    Allow From 127.0.0.1

    #Encryption Required
    </Location>

    </snip>

    Also, what does netstat say?

    jstevens@fragaria: /home/jstevens ]
    $ su -
    Password:
    root@fragaria: /root ]
    # netstat -anp | grep cupsd
    tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 4624/cupsd
    udp 0 0 0.0.0.0:631 0.0.0.0:* 4624/cupsd

    After disabling your firewall, you see this, right?

    root@fragaria: /root ]
    # iptables -L
    Chain INPUT (policy ACCEPT)
    target prot opt source destination

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    -Jeff

    On Thu, 2005-08-18 at 09:43 +1000, Charlie wrote:
    > I am wondering if someone might be able to assist me, someone completely new
    > to Debian and relatively new to Linux........? To set up my Epson Stylus C43UX
    > USB Printer, which works a treat with the C42UX driver in Linux.......... On
    > my Acer 1355LC laptop.
    >
    > I have ***not*** been able to connect through http://localhost:631 and unable
    > to get the onto the cups server through the KDE peripherals Pinter wizard.
    >
    > Cups appears to be looking for a network, which is non existent, yet has some
    > relevance to the hostname that I gave the system during the install, instead
    > of leaving it as the default "Debian"
    >
    > This is the message that is in /var/log/cups/error_log
    >
    > I [18/Aug/2005:08:37:47 +1000] Listening to 0:631
    > I [18/Aug/2005:08:37:47 +1000] Loaded configuration file
    > "/etc/cups/cupsd.conf" I [18/Aug/2005:08:37:47 +1000] Configured for up to 100
    > clients. I [18/Aug/2005:08:37:47 +1000] Allowing up to 100 client connections
    > per host. I [18/Aug/2005:08:37:47 +1000] Full reload is required.
    > E [18/Aug/2005:08:37:47 +1000] LoadAllClasses: Unable to open
    > /etc/cups/classes.conf - No such file or directory I [18/Aug/2005:08:37:48
    > +1000] LoadPPDs: Read "/etc/cups/ppds.dat", 2163 PPDs... I
    > [18/Aug/2005:08:37:49 +1000] LoadPPDs: No new or changed PPDs... I
    > [18/Aug/2005:08:37:49 +1000] Full reload complete. E [18/Aug/2005:08:37:49
    > +1000] StartListening: Unable to find IP address for server name "ariestao" -
    > Host name lookup failure
    > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    > # telnet localhost 631
    > Trying 127.0.0.1...
    > telnet: Unable to connect to remote host: Connection timed out
    >
    > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    > # /sbin/fuser -n tcp 631
    > -su: /sbin/fuser: No such file or directory
    > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    > # ps auxw | grep cups
    > root 1483 0.0 1.2 5632 2332 ? Ss 08:37 0:00 /usr/sbin/cupsd
    > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    > Its not a firewall problem, because nothing changes even when there is no
    > firewall or I use the command :- # iptables -nL INPUT
    >
    > The /etc/cups/cupsd.conf file shows that cups is listening to port 631 and not
    > eth0 or other.
    >
    > Logged in as root, I get an error message through Konqueror when I try to get
    > to http://localhost:631 also, though I can't recall what it was at the moment.
    >
    > I would appreciate some assistance as I have googled this for some two weeks
    > and am obviously using the wrong words, or no one else has experienced this
    > problem and written it up or posted it anywhere.
    >
    > Thank you in advance.
    > Charlie.
    >
    > *************
    > Registered Linux User:- 329524
    > +++++++++++++++++++++++++++++++++++
    > The law will never make men free, it is men that have to make the law free.
    > .............................Henry David Thoreau
    >
    > ***********************************************
    > Trying Linux Debian Sarge
    > _____________________
    >
    > 

    -- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: David R. Litwin: "Re: Apt-Get udev and the Newest Kernel (SOLVED)"

    Relevant Pages

    • Re: What is the trick to get Windows XP firewall to stay on (after a reboot)?
      ... > While I did not explicitly state that the EPRT and PORT commands reached ... > Windows Firewall did not start a listen according to netstat -a and Port ... So, while a proxy would result in a new listening socket, a firewall does ... client sending a PORT command that it has chosen to send. ...
      (microsoft.public.windowsxp.network_web)
    • Re: What is the trick to get Windows XP firewall to stay on (after a reboot)?
      ... > While I did not explicitly state that the EPRT and PORT commands reached ... > Windows Firewall did not start a listen according to netstat -a and Port ... So, while a proxy would result in a new listening socket, a firewall does ... client sending a PORT command that it has chosen to send. ...
      (microsoft.public.windowsxp.basics)
    • Re: What is the trick to get Windows XP firewall to stay on (after a reboot)?
      ... > While I did not explicitly state that the EPRT and PORT commands reached ... > Windows Firewall did not start a listen according to netstat -a and Port ... So, while a proxy would result in a new listening socket, a firewall does ... client sending a PORT command that it has chosen to send. ...
      (comp.security.firewalls)
    • Re: What is the trick to get Windows XP firewall to stay on (after a reboot)?
      ... > While I did not explicitly state that the EPRT and PORT commands reached ... > Windows Firewall did not start a listen according to netstat -a and Port ... So, while a proxy would result in a new listening socket, a firewall does ... client sending a PORT command that it has chosen to send. ...
      (microsoft.public.security)
    • Re: Best Plan of action for 2 forest.......
      ... PortQry reports the status of a port in one of the following ways: ... ..LISTENING This response indicates that a process is listening on the target ...
      (microsoft.public.windows.server.active_directory)