Re: Printing from Windows to a CUPS printer

From: Rod Smith (rodsmith_at_nessus.rodsbooks.com)
Date: 02/12/05 

Date: Sat, 12 Feb 2005 16:26:01 -0000

In article <374n8vF58das7U1@individual.net>,
        "kalimojo@btinternet.com" <kalimojo@btinternet.com> writes:
>
> I edited the /etc/cups/cupsd.conf file and made these changes
...
> changed the following
>
> ## Restrict access to local domain
> Order Deny,Allow
> Deny From All
> Allow From 127.0.0.1
>
> to
>
> ## Restrict access to local domain
> Order Deny,Allow
> Allow From All
> Allow From 127.0.0.1

This particular change is potentially dangerous. The "Allow From All"
line tells CUPS to accept external connections from *ANY* source. I'd
suggest changing "All" to your subnet's IP address range, such as "Allow
>From 192.168.1.0/24", or to specify individual authorized clients by IP
address.

Of course, this isn't such a big problem if your system is behind a NAT
router or if it isn't connected at all to the Internet. Still, it's
conceivable a NAT router could be misconfigured to pass through IPP
requests, so best to play it safe. 

-- 
Rod Smith, rodsmith@rodsbooks.com
http://www.rodsbooks.com
Author of books on Linux, FreeBSD, and networking

Relevant Pages