I know this has been hashed & rehashed here before, but this is a little different -
My system: Tumbleweed, all current updates installed (including Plasma 6):
I’m having trouble getting my Brother laser printer to work. I have followed the instructions at the SUPPORT.BROTHER.COM website. No result - the printer does not work (no sounds, in fact - the queue says it’s not found).
The printer is connected to my local network via wifi, at 192.168.1.252.
By trial & error, I’ve determined that the openSUSE firewall is at fault - specifically, if I use YAST to ‘do not start’ the firewall, upon reboot, the printer works fine. Unfortunately I don’t want to run my system with no firewall.
Question: Using YAST/Hardware/Firewall, what do I do to enable the firewall, but still allow the printer to work? I’m kind of a newbie at this firewall stuff, so please make it simple (- !
A lot depends on what your printer requires to connects to cups.
The firewall on your Tumbleweed installation is an ingress firewall - so you don’t need to open ports for outbound connections, just the inbound connections from the printer to your system. For IPP-based printing, port 631 is the most important; for SMB-based printing, it’ll be the ones listed in the table from the cups.org website that will be of use to you.
When you’re first configuring CUPS for the network printer, it can be useful to stop the firewall. Allowing the mdns service in the firewall may be sufficient for detection. If you want to rely on the CUPS dnssd backend for automatic discovery, then the same applies. For IPP printers allow port 631.
Hi, I used to struggle with this a lot in the past, eventually I figured that your firewall zone should allow at the very least mdns for the network discovery service to be allowed.
Not sure about ipp-client…
First of all get the default zone your network adapter is assigned to:
sudo firewall-cmd --get-default-zone
Suppose it returns “home” (otherwise, please adapt the following commands)
Then allow some more services in that zone and reload the firewall config:
In addition to what is already mentioned, I gave my printer a fixed ip address and allowed that by
sudo firewall-cmd --zone=home --add-source=192.168.1.XX --permanent
!