10.4 Server Firewall prevents printing to HP Laserjet 4250n

Howdy Folks!
I've been trying to print to a Laserjet 4250n from my PowerMac G4/733 running 10.4.9 Server, but the server's firewall causes the print jobs to stop and never reach the printer. Temporarily turning off the firewall allows the print jobs to reach the printer just fine.
First off, in order to "Add" the printer to my Printer Setup Utility, I had to open up port 5353 in the server's firewall. The printer has a static IP here on the LAN and is configured with an mDNS name(Bonjour). Other computers running 10.4.9 Client can print to the 4250N via Bonjour just fine.
Opening Port 515(LPR) and Port 631(IPP) in the firewall had no effect. Print jobs still stopped. So I started watching the firewall log and noticed that the firewall was Denying UDP packets in the 49000-51000 range anytime I tried to print.
I then added a rule to the firewall to allow all UDP packets in the range of 49000-50200 and finally my print jobs went through.
Does anybody know why this problem isn't documented better? I've spent hours today just trying to get my 10.4.9 Server to print on my LJ4250n that sits a mere 10 feet from the computer. I searched high and low on the 'net looking for information on printer ports, but found nothing about macintosh printing on UDP ports >49000. I'm reluctant to leave such a big range of UDP ports open just to be able to print, so I thought I would drop a message on this board to see what others might have done to address this problem.
Thanks for any info you can pass along. -Kevin

HP likes port 9100 if I remember correctly. Why origin Server UDP outbound packets would be blocked is very strange.

Similar Messages

  • Windows 7 client can't connect to Server 2008 R2 Print Server VM (ESXi 5.5)

    I have an issue today that is driving me bonkers.
    I recently came on-board to a company in my area as the system administrator and this network has everything and the kitchen sink wrong with the network layout, probably the worst I've seen and I'm slowly but surely fixing it day by day.....
    Well today I decided I was going to spin up another VM from a template and make a Print Server, seems harmless right? --- I thought so too, added all of the printers to the server and did test pages, all was dandy, but then I tried to add the printers to
    clients and other server and the real fun has begun, I'm truly perplexed now...
    I added a VM to my esxi 5.5 cluster at work that is a 2008 R2 server with only print management on it. I can map all of the printers on the network to the print server as-well as install the drivers correctly and I can resolve the IP and server name via
    DNS. I can test printers directly from the print server successfully printing out test pages however whenever I try to map printers you know from the directory in 'devices and printers' from any of the Windows 7 clients or any of the other 2003/2008 servers
    I get the classical "Windows cannot connect please check the network connection and make sure sure the printer is turned on". I disabled the windows firewall and I made the point to print GPO set to disabled and still no luck. Again I can print to
    all of the printers internally inside of the VM (so I know it communicating to all of the printers), I just can't connect to the printers listed in the directory on any of external desktop/client, it's like so annoying. spent about 6 hours until my brain just
    couldn't think anymore, was about to go BS on the VM.
    The only thing I can think of, as I was driving home, is that there is a GPO on one of the DC that has a desginated print server policy set. But prior to last week the forest leve was 2000 and now it's 2003. I just don't know Server 2000 enough to know if GPO's
    worked in the same way they do in 2003.
    Right now printers are connected to other servers in a ad hoc mentality it seems, there has never been a true print server.
    Anyone ever have this problem before?
    I'm truly puzzled...

    Hi Mid.Hudson-IT,
    Before we begin ,we should ensure we have configured the printer server correctly .
    Here is a link for reference of configuring the printer server .
    Print server role: Configuring a print server
    https://technet.microsoft.com/en-us/library/cc775791(v=ws.10).aspx
    "I can map all of the printers on the network to the print server as-well as install the drivers correctly and I can resolve the IP and server name via DNS"
    From this sentence ,I can`t figure out whether you have tried to ping the server both with the IP adress and name adress from the client ?
    If we can ping the print server from the client,we can ensure the connection to the printer server is good .
    Then we can try to install the printer driver directly to have a check .In the adress bar of Windows Explorer ,input "\\server name \the printer name"
    If we cannot ping the print server ,we should troubleshoot the network issue firstly.
    We also can check the event viewer for more information to troubleshoot this issue .
    Best regards

  • Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to.

    Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to. 
    I'm NOT in any way a Terminal Services expert and I need help trying to get an application program working in a multi-user environment.
    The issue is that the printer changes for every user that is logged in. The application needs to print NOT to the default printer, but to a "special" printer which is selected in the application... let's call it a label printer to simplify the explanation.
    You have your default regular printer, easy for the application to find that one, and then you have a special printer that labels get printed onto. The application needs to know what printer is the label printer. So we allow the user to select that in the
    application and the selection is stored in a config file in 
    C:\ProgramData\mfgr\prog\setting files
    I don't have access to the application so I can't change how this works.  
    In the "regular" world, selecting the label printer driver to use should be per machine, NOT per user. When a new user logs into a machine, the physical printer doesn't go "poof" and a new printer suddenly appear. Same printer for all
    users.
    Yet in terminal services, the physical machine is "merged" with the virtual machine on the server. And there can be many users logged in at the same time. So each users real machine (and real printer) is injected into the "fake" terminal
    services machine. The name of the printers is made unique for each user. So the printers DO go "poof" and change names depending on the user logged into terminal services.
    So user "A" logs in and sets up the application to print to "LabelPrinterForUserA" (or whatever the name of the printer happens to be), that setting is stored in the ProgramData subfolder, and all is well. Later, user "B" logs
    in, and when they print, the application tries to print to "LabelPrinterForUserA" which doesn't exist for user B or is only accessible by user A. If user B re-configures, that breaks it for user A. 
    SOLUTION 1: The way that /should/ work (in my mind) is that you define one "generic" printer in Terminal Services... call it "Virtual Label printer" and when the user wants to print to it, the print job gets re-directed back to whatever
    physical printer is actually connected to their local workstation. There is a map of virtual printer to actual printer depending on the current user. The application is told once to print to "Virtual Label Printer" for all users.
    SOLUTION 2: Or... there should be some way to make the ProgramData sub folders separate per user. E.g. when user "A" tries to access:
    C:\ProgramData\mfgr\prog\setting files
    they actually get 
    C:\UserData\UserA\AppData\mfgr\prog\setting files
    and user "B" gets
    C:\UserData\UserB\AppData\mfgr\prog\setting files
    So the question I have is: Does either of those solutions exist hidden somewhere in the setup of terminal server? Or is there another way around this issue that I don't know?

    I don't really have a "for sure" answer to this, but because people here can't seem to deal with a question that hasn't been answered I'll provide the best answer I did receive from ServerFault.com user Nathan:
    I can feel your pain with using old software on terminal servers ...the solution I've come up with definitely won't scale as it requires some manual configuration, but I've gotten this method to work with our label printers (which require to be
    printed to an LPT port...yep, that old).
    Share your USB-connected printers to the network on each machine. Then, have the user log in on aunique session for each of them
    (a TS account cannot be shared among computers for this to work) and install a network printer pointing to the USB one they shared. Try to use a DNS name to account for possible DHCP movements.
    After, it should work. Each user can do this since display names can be identical as long as the ports are different (which they are).
    This was clarified by the following series of comments:
    I think you are on to something here, and I originally advised the admin to do this. The problem he ran into is that it setup the printer names in the TS as "printer on usersworkstation"
    and he could not rename it except to change the "printer" to whatever. E.g. the "on userworkstation" remained. I believe there is another way of installing the printer which avoids this, but I can't find it. Ages ago, one used to do NET
    USE LPT2 \\computer\printer password /USER:domain\user /PERSISTENT:YES and then tell the driver to print to LPT2 –  James
    Newton Mar
    17 at 16:21   
    @JamesNewton That's actually the exact method we used. The way around the "network printer" part is to install it as local printer and map it to a TCP/IP port that way. –  Nathan
    C Mar
    17 at 16:28
    You mean in the case where the printers are TCP/IP connected and not local USB / LPT to the users workstation? That makes sense. Wonder if this will work for USB connected printers... –  James
    NewtonMar
    17 at 16:35   
    @JamesNewton You'd share the local printer on the client's PC then on the server connect via TCP/IP to it. You'd need static addresses or use DNS names if DHCP, though. –  Nathan
    C Mar
    17 at 16:51
    Ah. Yes. I see. Looks like the LPT thing should work even with a USB connected printer:superuser.com/questions/182655/… –  James
    Newton Mar
    17 at 17:09   

  • Printing issues when printing to Server 2008 R2 Print Server

    We have a problem with netwok printing that encompasses many different areas and versions of Windows OSes so I will be posting this in a few different places.
    Let me lay this out for you. We have a single Server 2008 R2 print server with 300 printers of various models. This print server has both 32 and 64-bit drivers installed for every printer. For the HP printers we are using the HP Universal Printing PCL 6
    (version 61.94.3.37) and for the Ricoh printers we are using their PCL6 driver for universal printing version 3.5. All drivers run in Isolation mode and no printer gets published to AD.
    We have a mix of Windows clients printing to these printers, both XP Pro and Windows 7 32 and 64-bit.
    Now for the problems: The other day one Isolation host on the server went crazy, processing was hitting 100% and memory was fluctuating and growing a lot. After investigating a little that isolation host was having issues accessing the Ricoh Driver (which
    was 3.4 at the time). In an attempt to resolve the issue we updated the driver to V. 3.5. This seemed to fix the isolation issues and things calmed down however this is the beginning of many other issues for the clients. Both Windows OS versions (XP and 7)
    don't seem to be either downloading and installing the updated driver and/or doing so correctly. Clients are now experiencing extremely slow printing, applications such as Word, Outlook, Excel and others open slowly and it can take 2-3 minutes for print dialog
    boxes to open. In all cases it seems that we have to have a tech delete the printer(s), delete the driver and then re-install the printer to make things better but for some reason, which is really unknown, this process doesn't work for every machine and on
    some we can't even remove the old drivers at all without booting into SafeMode and doing it that way.
    With all of that said, are there any suggestions as to why the clients aren't downloading and installing the drivers from the server correctly? How to avoid these issues when we need to upgrade the drivers on the server in the future? Most importantly right
    now, are there any recommendations or scripts on how to force the deletions of the printer, driver, reset the print spoolers and then re-add the printers in a more automated fashion?
    I have played with both wmic, pnputil and printuidll and am trying to put something together but without a set solution that will work consistently it becomes a lot more difficult.

    We are experiencing a very similar issue.
    Windows Server 2008 R2. Printers are deployed over group policy.
    Clients range from Windows 7 to Windows 8. Citrix XenDesktop and XenApp environment also connects to these endpoints.
    We have A wide assortment of HP printers, and Ricoh Printers.
    For the ricoh's we have been historically using the PCL6 drivers for the individual device type (not universal print). Up till recently, it all was working fine, until about some time in the middle of june, when everything just seemed to go crazy.
    The issue was resolved by moving off from the PCL 6 drivers and using the PCL5e driver counterparts on all of our ricoh printers.
    It would crash XenDesktop applications, it would crash office applications.
    The print spooler would lock up, even if the ricoh printers were not actually used, just as long as they were loaded.
    Even after loading PCL5 on the servers, some of the clients would simply not download the PCL5 version of the driver from the print server. In order to resolve this, I have created the steps below. Be advised, this may possibly cause damage on your system.
    We just found it worked great for us. Local printers will likely have to be manually reinstalled after this.
    Directions
    Stop the print spooler
    Open C:\Windows\System32\Spool and delete the following
    All files in SERVERS
    All files in PRINTERS
    All files in drivers
    All files in prtprocs
    Start the print spooler
    Open a command prompt as administrator, and run the following command
    Cscript C:\windows\system32\Printing_Admin_Scripts\en-US\prndrvr.vbs -x
    This should further delete all print drivers.
    Open a command prompt as a standard user (not administrator) and run the following
    Gpupdate
    Now wait. It takes a while, but the printers will slowly start to repopulate.
    I am still not sure what is going on with the PCL6 drivers for ricoh, and why this issue is happening. I'm guessing it has something to do with the Ricoh auto update that is included in their pcl6 drivers. Maybe some sort of auto update happened recently.

  • Prevent Printing of web-based .pdf files in Adobe Acrobat X Pro

    Hello,
    Could I get brief answers to the following three questions...
    Question 1:
    Do the prevent printing advanced options in Adobe Acrobat Pro X work reliably across all main browsers, such that I can safely display the .pdf files on a website, knowing that the majority of users (Chrome, Firefox. IE), will not be able to print the files, even if they save them to their local disk?
    Question 2:
    Can I go further than that and actually prevent the local saving of the .pdf files altogether?
    Question 3:
    Assuming one or both of the answers is Yes, which is what I am hoping for, will security measures prevent Google reading and indexing the files.
    Actually, I want this also to be a yes. It is only the downloading and printing of the files I hope to prevent, restricting those actions to people who purchase the documents.
    Many thanks in advance for your help.

    Question1: No.
    Question2: No.

  • Prevent Printing of Web Accessible pdf created with Acrobot Pro X

    I posted this elsewhere but have not had an reply so wondered if I asked in the wrong place.
    Hello,
    Could I get brief answers to the following three questions...
    Question 1:
    Do the prevent printing advanced options in Adobe Acrobat Pro X work reliably across all main browsers, such that I can safely display the .pdf files on a website, knowing that the majority of users (Chrome, Firefox. IE), will not be able to print the files, even if they save them to their local disk?
    Question 2:
    Can I go further than that and actually prevent the local saving of the .pdf files altogether?
    Question 3:
    Assuming one or both of the answers is Yes, which is what I am hoping for, will security measures prevent Google reading and indexing the files.
    Actually, I want this also to be a yes. It is only the downloading and printing of the files I hope to prevent, restricting those actions to people who purchase the documents.
    Many thanks in advance for your help.

    Question 1: No.
    Question 2: No.

  • Difference between logical spool server and alternative printer

    Hi All,
    We are in the process of implementing load balancing among printers. As of now, they are printing as static printers. I want to know:
    1) Is it necassary to define logical spool servers for printer load sharing or we by using printer load balancing and defining the alternative printer, we would be able to accomplish printer load sharing?
    2) Also, even after going by the help manual, still not able to figure out the correct advantage of logical spool servers.
    Thank You,
    Antarpreet

    Hi Antarpreet,
    Logical spool server is at application server level while printer load balancing or what is known commonly as pool printing is something at print server level.
    They are 2 different concepts.
    If you mutiple application servers and each one of them has spool work processes then the best way of making sure that printing makes use of these work processes on load sharing basis is to create logical spool server. In a logical spool server you can define 2 application servers or 1 application server and another logical spool server. Then this logical spool server can assigned to all the printers. When you fire a print out dispatcher would look for which of servers in the logical spool server is free and direct printing to it.
    In case of pool printing you create a printer pool again consisting of 2 physical printers or 1 physical printer and 1 pool printer. Here SAP is not responsible for load balancing but the actual print server is which will decide which printer in the pool is free and will direct the print out to it.
    So logical spool server helps in load balancing at SAP application server level while pool printing does load balacing at physical printer level.
    Regards.
    Ruchit.

  • Is printing possible with script after the document with a password to prevent printing??

    I saved a pdf with a password to prevent printing. When I open the pdf with Adobe Reader, I want print the document with automatic.
    is this possible?? I used a many kinds method, all the scripts were refused because security level.
    please give me a any hint...

    Why did you prevent printing when you want print the file? That make no sense.

  • How to prevent printing last print page in smartforms

    Hi everyone,
    when i print preview my samrtform, there is an extra blank page printing at end. for example, if i want to print 5 records, 6 print pages are printing. how to prevent printing this last page.
    answers will be rewarded
    thanks
    chintu

    Hi
      Try out this
    You need to Create --> Flow Logic --> Alternative process where you can
    specify a condition that will either, Go to the last page or not
    depending on the Conditions. You will need to set the General
    Attributes --> Go to New Page check box and the name of the Page to go
    to, as well as setting the Conditions as you have then to suppress the
    data.
    Regards
    Pavan

  • Preventing printing

    Hi all
    I have a requirement for the app I am developing in Apex 3.0... some users should not be able to "print" anything from the application (based on their authorisation level).
    By "print" they mean saving as CSV, generating PDF and even printing via the browser!
    I am not sure if it is possible to conditionally show/hide the spreadsheet/print links in the bottom of a report -- is it?
    Regarding the browser print functionality, I guess that it would be possible to block it in some way, but I would like to know if anyone has done this before.
    Thanks,
    Luis

    Blocking CSV and PDF output should be pretty easy, but preventing printing in the browser will be impossible. You can play some games with JavaScript, but those tricks are easy to get around with browser plug-ins like Firebug. Even if you do manage to prevent printing, I could always just hit "Print Screen" and now I have a bitmap image in my clipboard that I can print.
    There are 2 solutions that I can think of. The first is to use the PDF output settings in BI Publisher to password protect and prevent printing. I don't know of a way to do this in the traditional BIP + APEX integration, but it would be trivial using this technique.
    Another solution is Oracle Information Rights Management (IRM). IRM allows you to seal documents and requires that your end users install a client to even be able to open them. You can specify whether or not people can print documents, who can open them, and even for how long (ie expires on June 1st, 2008).
    Both of these solutions require an additional license, but you should know your options so you can discuss these with your management and decide whether the requirement for blocking printing is worth the tradeoff in additional development time and money.
    Tyler

  • Windows PC (XP) and Mac OS X Server 10.6 print service

    Can someone tell me if it is possible for a Windows PC running XP to make use of the Mac OS X Server 10.6 print service? Following the manual does not help. After enabling SMB I don't manage to connect to one of the shared printers. How could I make use of IPP and LPR support being built into Windows XP?

    I know the problems with Time Machine on Mac OS server. In your case: Look at the log files, searching for "backupd", if that tells you anything.
    In my case, Time Machine in the last year stopped several times. Occasionally, there was a helpful message in the log files where I could identify a file where it had hung -- typically intermediate build results of Xcode. After excluding or deleting the offending files (where possible), Time Machine ran successfully.
    Another situation which has repeatedly occurred is that time machine just hangs and does not progress, and no log entry helps. In 3 such cases what helped was to delete the spotlight index (e.g., with TinkerTool System) and let it rebuild. It took inordinately long (10 hrs) and there were log entries by mdworker that it had difficulty processing files. But when the spotlight index was finally rebuilt, Time Machine worked again.
    BTW: I don't need Time Machine to backup the server system, for that I run mirrors etc., but for user files it is most convenient and has helped several times. Thus I have excluded nearly everything but /User/*.

  • LaserJet 1018 shared on Printer server doesn't print

    Hi, I'm a multi HP owner (notebook, desktop a Photosmart printer and the LaserJet 1018)... I recently bought a Iomega NAS with the printer server service and I tried to share both of my HP printers on it. The PhotoSmart 7260 works perfectly, but the LaserJet 1018 does not: it says that it have a job pending but the print doesn't start. I've passed the same nightmare when I've tried to share the printer on the Desktop PC with Windows 7 Ultimate 64 bit: job pending but no printing unless I restart the PC... on startup the print stated. I've found the way to share it with Ubuntu Server 9.10 by installing HP linux driver.Now, having this nice NAS I would like to use it as my printer server (energy saving reasons).
    I've read a lot of people with the same problem but havn't find the solution. Somebody even says that the 1018 is a low budget printer and is not enabled for sharing, but it sounds bull**bleep** to me (it prints under linux). Somebody knows if and how to solve this problem? My clients are both Win7 x64 (I have to test my Ubuntu 10.10 desktop)... should I install 32bit version drivers? ore something like that? Or should I buy a new printer (!HP)???
    Thanks
    Alessandro

    If the printer is not postscript, and you are using 'generic' then the printer is likely not understanding what is being sent to it, so it is dumping the job.
    HP printers default to HPs own page desription language called PCL (Printer Control Language).
    If you did not install all the 'additional printers' when you installed your OS, might want to do so.
    If not, check HPs site for Mac drivers, or check out GIMP & GhostScript from SourceForge.net to see if they support that particular printer

  • How to manage Workgroup Windows 2012r2 core Server Firewall

    How to manage Workgroup Windows 2012r2 core Server Firewall?
    Ideas?
    I have tried most things I can, and it always returns error connecting

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • How to enable printer redirection in server 2012 (client printer should map in server 2012)

    Hello All
    I have 3 new 2012 servers by default client printer should map in 2012 server i have enabled in RDP properties but no luck can any one have the idea about this issue.

    Hi Mohan,
    You can refer below links to configure Printer redirection in Windows Server 2012.
    Print and Document Services Overview
    Configuring Printer Redirection Settings
    Printer Redirection
    Regards,
    Manjunath Sullad

  • Server 2012 r2 printer problem

    Hello,
    We have server consisting os of windows server 2012 R2, in this server we have installed printer & it was workng ok for 2 to 3 days, after that suddenly the printer disspeared from the server, we have tried to install the printer the system was not 
    allowing us to add  the printer,  the system gives message as
    " windows can't open add printer' There are no more end points available from the endpoint mapper'
    Please give us solution for this problem, due to this we can't print any thing. our work is held up.
    With Regards,
    Sulochana Rai
    Decon India Plastics Pvt. Ltd.
    9860298145

    The print spooler service is not running most like due to the print driver that was installed.  Configure the print driver to run in Isolation. 
    Here's a couple ways to set this up
    http://blogs.technet.com/b/askperf/archive/2009/10/08/windows-7-windows-server-2008-r2-print-driver-isolation.aspx
    Alan Morris Windows Printing Team

Maybe you are looking for