If this is the case, then you will have to allow a 'proxy' server
to be put into the system, or drop all the discussion of firewalls.
If you put in a 'proxy server', then you have effectively invented
a queue/spool server.
I do not think that folks will buy the requirement that the IPP
implementation must punch through a firewall...
This would make a lovely tool for security violations.
Patrick Powell