SLUG Mailing List Archives
RE: [SLUG] remote printing acorss Internet, possible ??
- To: Dave Kempe <david@xxxxxxxxxxxxxxxxxx>
- Subject: RE: [SLUG] remote printing acorss Internet, possible ??
- From: Umar Goldeli <umar@xxxxxxxxxxxxxx>
- Date: Mon Oct 9 20:32:10 2000
- Cc: tom burkart <tom@xxxxxxxxxxxxxxxx>, slug@xxxxxxxxxxx
> Doesn't lpr or lprng work over the internet?
> Can't the clients just insert a hostname and then print to that, as long as
> the permissions are ok then it should work right?
It will - but are the people running the lpd on the printhost happy to
open gaping holes in their firewall? ... in fact are they happy to place
their server in their dmz fullstop? :)
On another note - what is the priority in question - data privacy or
avoiding the possibility of lpd and the printhost being exploited?
A vpn is a Good Thing(tm) - although you have to have two compatible
firewalls (and/or routers) that speak the same "vpn method" - one at each
end - if you want to do it "properly".. it really all depends on what kind
of networks are on each end and how sophisticated and paranoid they are.
If you have a really simple network and not much in the way of network
layering and firewalls etc and don't have ungodly amounts of paranoia,
then it could be as simple as installing "free s/wan" on each box and
pointing them at each other or setting up ipsec between the routers at
each location (this is piss easy with most routers providing you have the
right features).. but I still wouldn't call the network hideously safe if
you can happily point boxes at each other with no silly firewalls or
other "nuisances" in between. :)
> > > we have a scanner that could send directly to an IP address. Is
> > it possible
> > > to make it print to a printer across the Internet and behind a
> > firewall ??
> > Yes it can be done - However if you want it done safely it is involved.
> > In brief:
> > You have to have a ssl (VPN) tunnel between the two gateways. Then you
> > can do whatever you like over it.