attachment-0001
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1264" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=463280721-08122003><FONT size=2>I'm brand new to IPP and I have
a client that wants to print directly to our copy shop's printer. I'm
attempting to set this up without breaching security. I'm aware that I can
use VPN tunneling (IPSEC), but I'm exploring other options.</FONT></SPAN></DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2>We have a Linux Firewall
running on Redhat. Our internal network is running a 192.168.4.0 scheme
that goes through the firewall to the router.</FONT></SPAN></DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2>I have a small Hawking 10/100
Parallel Print Server hooked up to my printer, which allows IPP printing.
It's assigned to 192.168.4.100. I can print just fine internally.
I'm at the point where I need to assign firewall rules to let this
through.</FONT></SPAN></DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2>Do I need to forward port 631
to the firewall's external interface through NAT to allow IPP to go
through? Ideally, I'd like to be able to print to the Firewall's external
IP. Is this secure? Is there a better
configuration?</FONT></SPAN></DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2>Thanks.</FONT></SPAN></DIV>
<DIV><SPAN class=463280721-08122003><FONT size=2>
<P><FONT size=2>---<BR>Ara Roselani<BR>Network Administrator<BR>Portland,
Oregon</FONT></P></FONT></SPAN></DIV></BODY></HTML>