>> Yes, please.
Ok, here goes. Let me know if you have any questions about this, or
suggestions on how it could be improved.
Garry
--- lpd.perms.old Wed Dec 13 14:46:51 2000
+++ lpd.perms Wed Dec 13 14:47:48 2000
@@ -4,8 +4,8 @@
ACCEPT LPC=status,lpq,printcap
# Only trust certain host keys to forward jobs/commands
-REJECT AUTHFROM=?* PRINTER=</var/spool/printer/queues.secure NOT
AUTHFROM=</var/spool/printer/hostkeys.allow
-REJECT AUTHFROM=?* AUTHJOB NOT AUTHFROM=</var/spool/printer/hostkeys.allow
+REJECT SERVICE=R AUTHFROM=?* PRINTER=</var/spool/printer/queues.secure NOT
+AUTHFROM=</var/spool/printer/hostkeys.allow FORWARD
+REJECT SERVICE=R AUTHFROM=?* AUTHJOB NOT AUTHFROM=</var/spool/printer/hostkeys.allow
+FORWARD
# Allow root to control and remove jobs
ACCEPT SERVICE=C,R SERVER REMOTEUSER=root
@@ -30,7 +30,7 @@
ACCEPT SERVICE=M AUTH=USER,FWD AUTHJOB AUTHSAMEUSER
# Reject unauthentic print/lprm requests to authenticated queues
-REJECT SERVICE=R,M PRINTER=</var/spool/printer/queues.secure
+REJECT SERVICE=R,M NOT AUTH PRINTER=</var/spool/printer/queues.secure
# Reject unauthentic print requests from off MITnet
REJECT SERVICE=R NOT REMOTEIP=</var/spool/printer/masks.allow
-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
