Results 1 to 8 of 8

Thread: Canon Pixma TS6251 - wireless connection & firewall

  1. #1

    Default Canon Pixma TS6251 - wireless connection & firewall

    I can connect in a wireless way to my Canon Pixma TS6251 printer/scanner if I disable the firewall or if I perform the following steps:
    * make sure the printer/scanner gets assigned a fixed IP address by the router (192.168.2.159 in my case)
    * add the following rule to the firewall via the command line interface (note that 'home' is the active zone):
    firewall-cmd --zone=home --add-rich-rule='rule family="ip v4" source address="192.168.2.159" accept'

    Before I tried to use the GUI (via yast2 - Firewall) and opened ports but I could not get that working although I opened all ports mentioned in the documentation and recommended by various websites (80, 161, 427, 443, 515, 631, 8000, 8610-8612, 9100).

    So now that I have the scanner/printer working, the question is how to find out which ports are being used and how to best insert/open them in the GUI of the firewall.

  2. #2
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    20,179
    Blog Entries
    1

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by bodibo View Post
    I can connect in a wireless way to my Canon Pixma TS6251 printer/scanner if I disable the firewall or if I perform the following steps:
    * make sure the printer/scanner gets assigned a fixed IP address by the router (192.168.2.159 in my case)
    So now that I have the scanner/printer working, the question is how to find out which ports are being used and how to best insert/open them in the GUI of the firewall.
    Refer to the following for that information
    Code:
    man pixma
    https://linux.die.net/man/5/sane-pixma
    Firewalling For Networked Scanners

    The sane pixma backend communicates with port 8612 on the scanner. So you will have to allow outgoing traffic TO port 8612 on the common subnet for scanning.

    Scanner detection is slightly more complicated. The pixma backend sends a broadcast on all direct connected subnets it can find (provided your OS allows for enumeration of all interfaces). The broadcast is sent FROM port 8612 TO port 8612 on the broadcast address of each interface. The outgoing packets will be allowed by the rule described above. Responses from the scanner are sent back to the computer TO port 8612. Connection tracking however does not see a match as the response does not come from the broadcast address but from the scanners own address. You will therefore have to allow incoming packets TO port 8612 on your computer.

    So in short: open the firewall for all traffic from your computer to port 8612 AND to port 8612 to your computer.

    With the firewall rules above there is no need to add the scanner to the pixma.conf file, unless the scanner is on a network that is not directly connected to your computer.
    openSUSE Leap 15.0; KDE Plasma 5

  3. #3

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Dear Deano, thank you for your reply. Actually I had already tried to open those ports via the default firewall GUI (via yast2), but that did not allow me to connect to the printer/scanner.

    EDIT: I just noticed the existence of another GUI for the firewall: firewall-config
    That allows to enter rich rules and even set ports next to IP addresses. So that should solve the issue.

  4. #4
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    20,179
    Blog Entries
    1

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by bodibo View Post
    Dear Deano, thank you for your reply. Actually I had already tried to open those ports via the default firewall GUI (via yast2), but that did not allow me to connect to the printer/scanner.
    No firewall rules should be needed for printing (since it only involves solicited traffic), but the scanner operation requires port 8612 to be open for the reasons already outlined.

    EDIT: I just noticed the existence of another GUI for the firewall: firewall-config
    That allows to enter rich rules and even set ports next to IP addresses. So that should solve the issue.
    Yes, it's the graphical firewalld front-end (firewall-cmd is the CLI utility).
    openSUSE Leap 15.0; KDE Plasma 5

  5. #5
    Join Date
    Jun 2008
    Location
    Belleville, Ontario, Canada
    Posts
    429

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by bodibo View Post
    Dear Deano, thank you for your reply. Actually I had already tried to open those ports via the default firewall GUI (via yast2), but that did not allow me to connect to the printer/scanner.

    EDIT: I just noticed the existence of another GUI for the firewall: firewall-config
    That allows to enter rich rules and even set ports next to IP addresses. So that should solve the issue.
    Out of curiosity, what other "GUI" have you seen?
    "Making rich people richer doesn't make the rest of us richer."
    Ha-Joon Chang

    openSUSE 15.0 4.12.14-lp150.12.45-default x64

  6. #6
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    20,179
    Blog Entries
    1

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by kerijan2003 View Post
    Out of curiosity, what other "GUI" have you seen?
    I think the OP was referring to the fact that they'd tried configuring via the YaST Firewall utility, and had only just become aware of the firewall-config GUI.
    openSUSE Leap 15.0; KDE Plasma 5

  7. #7
    Join Date
    Jun 2008
    Location
    Belleville, Ontario, Canada
    Posts
    429

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by deano_ferrari View Post
    I think the OP was referring to the fact that they'd tried configuring via the YaST Firewall utility, and had only just become aware of the firewall-config GUI.
    That makes sense to me. Thanks for the clarification.
    "Making rich people richer doesn't make the rest of us richer."
    Ha-Joon Chang

    openSUSE 15.0 4.12.14-lp150.12.45-default x64

  8. #8

    Default Re: Canon Pixma TS6251 - wireless connection & firewall

    Quote Originally Posted by kerijan2003 View Post
    That makes sense to me. Thanks for the clarification.
    That is indeed the case.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •