Your message dated Mon, 19 Mar 2012 11:29:33 +0000
with message-id <20120319112933.GZ4889@desktop>
and subject line CUPS always opening (UDP) port on all interfaces
has caused the Debian Bug report #644144,
regarding cups: CUPS always opening (UDP) port on all interfaces
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
644144: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=644144
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cups
Version: 1.5.0-8
Severity: normal

I have the following lines in my cupsd.conf to prevent CUPS from opening ports
on any external interface (I don't use this machine as printing server):

# Only listen for connections from the local machine.
Listen localhost:631
Listen /var/run/cups/cups.sock


However, "netstat -nlp" still shows

tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN
24600/cupsd
tcp6       0      0 ::1:631                 :::*                    LISTEN
24600/cupsd
udp        0      0 0.0.0.0:631             0.0.0.0:*
24600/cupsd

So a port was opened on all interfaces, against my configuration.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.1.0-rc6-selfcompiled+ (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cups depends on:
ii  adduser                3.113           
ii  bc                     1.06.95-2+b1    
ii  cups-client            1.5.0-8         
ii  cups-common            1.5.0-8         
ii  cups-ppdc              1.5.0-8         
ii  debconf [debconf-2.0]  1.5.40          
ii  ghostscript            9.02~dfsg-3     
ii  libavahi-client3       0.6.30-5        
ii  libavahi-common3       0.6.30-5        
ii  libc6                  2.13-21         
ii  libcups2               1.5.0-8         
ii  libcupscgi1            1.5.0-8         
ii  libcupsdriver1         1.5.0-8         
ii  libcupsimage2          1.5.0-8         
ii  libcupsmime1           1.5.0-8         
ii  libcupsppdc1           1.5.0-8         
ii  libdbus-1-3            1.4.16-1        
ii  libgcc1                1:4.6.1-4       
ii  libgnutls26            2.12.10-2       
ii  libgssapi-krb5-2       1.9.1+dfsg-1+b1 
ii  libijs-0.35            0.35-8          
ii  libkrb5-3              1.9.1+dfsg-1+b1 
ii  liblcms1               1.19.dfsg-1     
ii  libldap-2.4-2          2.4.25-3        
ii  libpam0g               1.1.3-2         
ii  libpaper1              1.1.24+nmu1     
ii  libpoppler13           0.16.7-2+b1     
ii  libslp1                1.2.1-7.8       
ii  libstdc++6             4.6.1-4         
ii  libusb-0.1-4           2:0.1.12-19     
ii  lsb-base               3.2-28          
ii  poppler-utils          0.16.7-2+b1     
ii  procps                 1:3.2.8-11      
ii  ssl-cert               1.0.28          
ii  ttf-freefont           20100919-1      
ii  zlib1g                 1:1.2.3.4.dfsg-3

Versions of packages cups recommends:
ii  avahi-daemon            <none>     
ii  colord                  <none>     
ii  cups-driver-gutenprint  5.2.7-2    
ii  foomatic-filters        4.0.9-1    
ii  ghostscript-cups        9.02~dfsg-3

Versions of packages cups suggests:
ii  cups-bsd     <none>         
ii  cups-pdf     <none>         
ii  foomatic-db  20110803-3     
ii  hplip        <none>         
ii  smbclient    2:3.5.11~dfsg-1
ii  udev         172-1          

-- Configuration Files:
/etc/cups/cupsd.conf changed:
LogLevel warn
MaxLogSize 0
SystemGroup lpadmin
Listen localhost:631
Listen /var/run/cups/cups.sock
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseLocalProtocols CUPS dnssd
DefaultAuthType Basic
WebInterface Yes
<Location />
  Order allow,deny
</Location>
<Location /admin>
  Order allow,deny
</Location>
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>
<Policy default>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs 
Set-Job-Attributes Create-Job-Subscription Renew-Subscription 
Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job 
Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job 
CUPS-Get-Document>
    Require user @OWNER @SYSTEM r
    Order deny,allow
  </Limit>
  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class 
CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM r
    Order deny,allow
  </Limit>
  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer 
Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs 
Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer 
Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs 
CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM r
    Order deny,allow
  </Limit>
  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM r
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>
<Policy authenticated>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs 
Set-Job-Attributes Create-Job-Subscription Renew-Subscription 
Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job 
Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job 
CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM r
    Order deny,allow
  </Limit>
  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class 
CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM r
    Order deny,allow
  </Limit>
  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer 
Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs 
Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer 
Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs 
CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM r
    Order deny,allow
  </Limit>
  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM r
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>


-- debconf information:
  cupsys/raw-print: true
  cupsys/backend: ipp, lpd, parallel, serial, socket, usb, snmp, dnssd



--- End Message ---
--- Begin Message ---
Hello Ralf,

There is no bug, Change 'Browsing On' to 'Browsing Off' and restart
cups.

Closing.

Regards,

Brian.


--- End Message ---

Reply via email to