Bug 28746

Summary:	After fresh Mageia Install, adding printer doesn't work as Firewall does not allow to explore it
Product:	Mageia	Reporter:	david Cossé <saveurlinux>
Component:	RPM Packages	Assignee:	Mageia tools maintainers <mageiatools>
Status:	NEW ---	QA Contact:
Severity:	major
Priority:	Normal	CC:	davidwhodgins, doktor5000, fri, ouaurelien, stephengermany
Version:	Cauldron	Keywords:	IN_ERRATA8, IN_ERRATA9
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA8TOO
Source RPM:	system-config-printer	CVE:
Status comment:

Description david Cossé 2021-04-08 09:32:56 CEST

Theme name: Adwaita
Kernel version = 5.10.27-desktop-1.mga8
Distribution=Mageia release 8 (Official) for x86_64
CPU=Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz

I'm not sure this bug is related to this package anyway after a fresh Mageia 8 installation I wanted to add an HP printer. I used the Mageia Control Center to add printer. Packages install successfully, unfortunately I was not able to see my wifi printer and to add it. I restarted cups service without success, I reboot the computer then the HP logo appears, I tried throw that way but without more success anyway a more explicit message appears the suggest to look at the firewall configuration. Enabling to discover printer and scanner solved the problem.
I would suggest 
- to display this message when user want to add printer or
- to ask user to disable firewall for printer or scanner.

Comment 1 Morgan Leijström 2021-04-08 13:34:05 CEST

Thank you for reporting.
Something like this have crossed my mind too.

I regard this as an enhancement request.
Such are typically set against Cauldron.

Whiteboard: (none) => MGA8TOO
CC: (none) => fri
Hardware: x86_64 => All
Severity: normal => enhancement
Source RPM: system-config-printer-system-config-printer.rpm => system-config-printer
Version: 8 => Cauldron

Aurelien Oudelet 2021-04-09 15:47:02 CEST

Assignee: bugsquad => pkg-bugs
CC: (none) => ouaurelien

Comment 2 Morgan Leijström 2023-07-02 08:04:07 CEST

Actually this is pretty bad.

Makes new users not finding printers.

https://forums.mageia.org/en/viewtopic.php?t=14975

Assignee: pkg-bugs => mageiatools
Severity: enhancement => major
Keywords: (none) => FOR_ERRATA8, FOR_ERRATA9

Comment 3 Morgan Leijström 2023-07-02 09:45:52 CEST

Firewall configuration in
 In MCC > Security > Set up your personal firewall

Should user enable both "CUPS" and "Network printer/scanner autodiscovery"?

Stephen Germany 2023-07-02 15:34:50 CEST

CC: (none) => stephengermany

Comment 4 Florian Hubold 2023-07-02 17:57:26 CEST

(In reply to Morgan Leijström from comment #3)
> 
> Should user enable both "CUPS" and "Network printer/scanner autodiscovery"?

"Network printer/scanner autodiscovery" should be sufficient. Allowing CUPS would be required if you want to send print jobs from a different box to the CUPS server running on the box where you configure this, AFAICT.

Although I'm not sure why we don't allow outgoing connections, as "Network printer/scanner autodiscovery" is not about incoming connections ... ? Changing the default here to allow "Network printer/scanner autodiscovery" would improve the end user experience quite a bit IMHO.

CC: (none) => doktor5000

Comment 5 Dave Hodgins 2023-07-02 21:59:17 CEST

Printer autodiscovery is ok on a trusted small lan. It's not ok on an
untrusted lan or in a large netowrk. For security reasons, it should not
be encouraged.

https://blog.hidglobal.com/2022/01/printer-security-real-threat-heres-what-do-about-it

Having it on should not be a default.

CC: (none) => davidwhodgins

Comment 6 Morgan Leijström 2023-07-07 15:57:22 CEST

https://wiki.mageia.org/en/Mageia_9_Errata#Printing
https://wiki.mageia.org/en/Mageia_8_Errata#Printing

Keywords: FOR_ERRATA8, FOR_ERRATA9 => IN_ERRATA8, IN_ERRATA9