[CentOS] Cannot open port 631 for Cups printer sharing

Mon Mar 2 18:21:40 UTC 2009
b.j. mcclure <keepertoad at bellsouth.net>

On Mon, 2009-03-02 at 13:06 -0500, JohnS wrote:
> On Mon, 2009-03-02 at 12:43 -0500, b.j. mcclure wrote:
> > On Mon, 2009-03-02 at 12:27 -0500, JohnS wrote:
> > > On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
> > > > JohnS wrote:
> > > > > On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
> > > > >   
> > > > >> I have been trying to set up printer sharing on the LAN.All machines are
> > > > >> CentOS 5.2 fully updated. The problem server is a fresh build.  The box
> > > > >> it is replacing worked fine for many months.
> > > > >> The problem appears to be a closed port 631 on the new box.  iptables
> > > > >> and ip6tables are stopped as shown by the output below.  To confirm I
> > > > >> was using nmap correctly I ran it against the old server first which
> > > > >> shows 631 open.  No matter what I do to the new box (192.168.2.205) 631
> > > > >> remains closed.  I was running it on the new box via ssh which I think
> > > > >> eleminates any swithc/router issues.
> > > > >>
> > > > >> Any thoughts gladly accepted.  This must be something simple/stupid I
> > > > >> have overlooked.  Not much hair left to pull out. ;-/
> > > > >>     
> > > > >
> > > > > Do you have the Cups Service running? service cups status and service
> > > > > hplip status.
> > > > >
> > > > >   
> > > > I don't have an answer but I have to believe that your problem
> > > > is related to mine (thread: cups & hp-toolbox)
> > > > my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 
> > > > 12:03:43 EST 2008 i686 i686 i386 GNU/Linux
> > > > [root at rwells-rh legacydp]# /sbin/service hplip status
> > > > hpiod (pid 6422) is running...
> > > > hpssd (pid 6427) is running...
> > > > 
> > > > [root at rwells-rh legacydp]# /sbin/service cups status
> > > > cupsd (pid 6453) is running...
> > > > 
> > > >Interesting that when the local host address is used the port is open:
> > > >[root at rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
> > > It is configured by default to it has to be changed
> > > 
> > > See below working config. You will need to have iptables to allow access
> > > from remote connections. /etc  cups and hp dirs.
> > > cupsd.conf:
> > > 
> > > MaxLogSize 2000000000
> > > # Show general information in error_log.
> > > LogLevel info
> > > SystemGroup sys root
> > > # Allow remote access
> > > Port 631
> > > Listen /var/run/cups/cups.sock
> > > # Enable printer sharing and shared printers.
> > > Browsing On
> > > BrowseOrder allow,deny
> > > # (Change '@LOCAL' to 'ALL' if using directed broadcasts from another
> > > subnet.)
> > > BrowseAllow @LOCAL
> > > BrowseAddress @LOCAL
> > > DefaultAuthType Basic
> > > ------
> > > hplip.conf:
> > > 
> > > # hplip.conf
> > > 
> > > [hpiod]
> > > # port=0 (dynamic IP port)
> > > port=2208
> > > [hpssd]
> > > # port=0 (dynamic IP port)
> > > port=2207
> > > 
> > > [hplip]
> > > version=1.7.2
> > > jdprobe=0
> > > 
> > > Iptables needs:
> > > -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
> > > -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
> > 
> > My config files agree with yours except hplip is version 1.6.7.
> 
> Ok the version I have running is directly from the hplip website. It is
> not the CentOS Distro version.  This actually brings up something of
> which I really believe that upstream has modified the code (backports
> etc). What is extremly strange is that I could not get any HP printers
> to function correctly with the hplip rpm from Upstream. So what I done
> was down load the binary from HP, thus far I have not have any problems.
> There is a newer version on the site than I have running. Why I don't
> have the newest is, for some strange reason it does not want to work
> right.
> http://hplipopensource.com/hplip-web/index.html 
> You can try this but it want solve the your current problem of knowing
> why it want work. Ultimately file a bug report as both of you are having
> the same problem and none seems to have an answer.

I just called and had the printer (hplaserjet 1300) reconnected to the
old server and it works fine with hplip ver. 1.6.7 so I don't think it's
hplip.  Both machines are identical except for motherboard, ram and
drives, none of which should be in the picture here AFAIK.  Even had the
cat5 cable switched between the two boxes with no change.  Don't think I
have ever seen a port closed with the firewall down and a service
running on it before.  You may be right, it may be a bug but I've done
this so many times on centos 5 without this issue.  Thanks for all your
help.  I'll keep plugging at it and if all else fails try another
install.

> > Firewall is completely down, i.e., iptables and ip6tables are stopped.
> OK i see now
> 
> JohnStanley

B.J.

CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 13:13:37 up 20:07, 3 users,
load average: 0.44, 0.48, 0.34