Profile for HPLib/HPCups

[xyproto]

Profile for HPLib/HPCups

[xyproto]

I added one file for HPLIP and one for CUPS and created a new release.

Please test!

[xyproto]

Yes, just sudo ufw allow hplip.

The ufw files needs to be copied to the right location on your system first, though. Typically /etc/ufw/applications.d/.

[xyproto]

Hi, sure, but do you happen to know which port numbers are involved? Could it be port 631 (the port used by cups)?

[xyproto]

After some searching it appears it could be:

Port 161,162 and 9100 (all TCP ports, I assume).

[NovaViper]

Cool, I'm actually trying to figure out how to import the profiles into ufw/gufw.. How do I do that?

[NovaViper]

When I try to import, Gufw keeps saying filename has wrong permissions (not 600)

[xyproto]

I haven't used Gufw, but if you run chmod 600 on the file, it should change the permissions

Alternatively, in some file management applications you can right click the file, find the right settings view and change the permissions to read only (not write) and only for the current user, to achieve the same as chmod 600.

[NovaViper]

Oof.. apparently when I go and import, it doesn't even appear in gufw <_> Is there any other way of importing the profile into UFW in general?

[NovaViper]

Sorry for the late reply! I've been busy with school and had to format both my computers, so I didn't get the chance to test it.

[NovaViper]

Alrighty, finally got to test it but noticed that it doesn't work. HPLIP still seems to be blocked by the firewall :(

[xyproto]

Aw. Thanks for testing, though! I updated the hplip file to also open up UDP port 5353, perhaps this helps?

[NovaViper]

Just tested it again, still being blocked :(

[NovaViper]

From what I can see, it seems to be generating ports randomly

[xyproto]

Ports in one direction may be randomly chosen (and not normally blocked by a firewall), while ports in the other direction may depend on the ports being open with the currently running firewall.

Does it work if you turn off ufw altogether? If it then still does not work, then it's not an ufw configuration issue.

[NovaViper]

Yeah, it works when I disable UFW completely

[xyproto]

I added port 137 as well, to the file that is in the latest master. Perhaps it works now?

If not, could it be that you have the same issue as in this question? https://answers.launchpad.net/hplip/+question/664494

[NovaViper]

Oddly enough, it's still not working :( I went and followed the steps that were listed in the launchpad link, nothing

[xyproto]

I'm bummed out. If you ever find the right TCP and UDP ports, please let me know, and I'll update the file. :)

[NovaViper]

Hmm.. maybe put in TCP and UDP types for reach port number?

--edit--
This might help: https://developers.hp.com/hp-linux-imaging-and-printing/KnowledgeBase/EnableServicesInFirewall.html

[xyproto]

Those ports should be open.

Have you tried updating the hplip driver?

https://askubuntu.com/a/1165788/19017

[xyproto]

Please re-open if this is still an issue.

[NovaViper]

Unfortunately the issue is still present, even with the latest version of hplip. I haven't been able to figure out a solution other than disabling ufw permanently