> > > > I thought CUPS was *the* way to print on Linux.  Is there
> > > > another solution that would work better with Net::Printer?
> > >
> > > CUPS is the latest in a long string of different print systems,
> > > all trying to solve this infernally difficult problem called
> > > putting dots on the right place on a bit of paper. And all
> > > systems seem to fail at it.
> > >
> > > Admittedly, CUPS is better than most and to my mind best suited
> > > to modern printing needs. What amuses me is what kind of project
> > > would recommend you not use CUPS, and what is their reasoning?
> >
> > What they've suggested is that using lpr on the remote system and
> > opening port 631 to the world is a bad idea and that it's much
> > better to use Net::Printer.  Would you agree?
>
> I don't know Net::Printer, but if it prints over the network - as the
> name implies - it has to use a port. So you have to open that port.
> That's how TCP/IP works. No way around it.
>
> Certainly, the organisation you are working in is behind a firewall
> that allows pretty little from the outside to the inside. (If not so,
> their network administrator or external consultant or or or should be
> beaten over his head until he can spell "Bruce Schneier".) So you are
> *not* opening port 631 to the world.
>
> You are certainly opening it to your organisation. I have messed up my
> CUPS configuration right now and can't look it up for sure but I
> remember CUPS being able to listen only to certain hosts (IP
> addresses) other than localhost. If if this is not so, you can still
> set up a firewall on the client box (the one that is supposed to do
> the printing) that allows only your server to connect to port 631 on
> it.
>
> If someone then argues about source IP spoofing, just let him. If
> someone in your organisation is able to do it, make him your network
> admin. ;-)

You're right, access to the printer can be given only to certain
hosts.  So simply using 'lpr file.pdf' on the remote machine doesn't
strike you as a bad idea?

- Grant
-- 
gentoo-user@lists.gentoo.org mailing list

Reply via email to