Firewall settings for shared printer

Can anyone tell me what I need to do to the firewall in order to make a shared printer available to other machines on my network?

I have the printer set up and have tested it with the firewall switched off, but as soon as I restart the firewall, the printer is inaccessible.

I thought that all traffic on the internal network was allowed, but it seems that I need to create an explicit rule in order to get the shared printer working. Unfortunately, I haven’t been able to figure out how to do that yet.

You can only define internal and external networks if you have two network cards.
In order to have the printershare working through the firewall you need to open the CUPS port, which is 631

Not being used to setting up the openSUSE firewall, I don’t seem to be getting it right.

I have set up a new custom rule with the IP address of the machine which wants to access the shared printer as the ‘Source Network’ address. I left the protocol as TCP and set both the Destination and Source ports to 631, these show in Firewall as ipp(631)

I tried this on both the Internal and External Zones, but with no success.

I’ve obviously got something wrong, but can’t figure out what.