Re: [qubes-users] fw for network printer setup

2018-03-05 Thread 'awokd' via qubes-users
On Mon, March 5, 2018 9:39 pm, yreb...@riseup.net wrote:
> is there any harm in leaving Template fedora-26-clone-printer-only
> connected to sys-net directly Not to sys-firewall ?

It's not really good practice. You shouldn't have to do anything special
to change it to sys-firewall, besides maybe shutting it down first.

> as of now it is working , I just made the Template the default for  DVMs
> and print documents  from  the "open in DVM"

Great!



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9e2695e248eeca3098bff0264d44733d.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-05 Thread yrebstv
is there any harm in leaving Template fedora-26-clone-printer-only  
connected to sys-net directly Not to sys-firewall ?

as of now it is working , I just made the Template the default for  DVMs
and print documents  from  the "open in DVM"

I am using Q3.2 , yes. 


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/474d69b0744394a87c3fa0a1bc3ebc6e%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-05 Thread Unman
On Mon, Mar 05, 2018 at 09:52:28AM -0800, Yuraeitha wrote:
> On Friday, March 2, 2018 at 9:51:00 PM UTC+1, yre...@riseup.net wrote:
> > On 2018-03-01 18:47, awokd wrote:
> > > On Fri, March 2, 2018 4:20 am, yreb...@riseup.net wrote:
> > >> On 2018-03-01 18:16, awokd wrote:
> > >>
> > >>> On Fri, March 2, 2018 4:10 am, yreb...@riseup.net wrote:
> > >>>
> > >>>
> >  When you see the message "Will you specify the DeviceURI ?",
> > 
> > 
> > 
> >  For USB Users: Choose N(No)
> >  For Network Users: Choose Y(Yes) and DeviceURI number.
> >  ---
> > 
> > 
> > 
> >  So, I chose "yes" then it wanted something like the IPP:// address
> >  ;
> > 
> > >>>
> > >>> You have to put your printer's IP address in here.
> > >>>
> > >>>
> >  I
> >  may have put in the gateway address  and got nowhere I guess your
> >  saying it doesn't matter if it didn't work in the Template ,
> > >>>
> > >>> Right, doesn't matter it doesn't work, but put in the right IP address.
> > >>>
> > >>>
> > >>>
> >  And for the IP address of the printer in the AppVM use the gateway of
> >   the AppVM ?
> > 
> >  in system-config-printer  there are various options  in settings->
> >  device URI: usb://dev/usblp0  is  filled in ,  and in printer state it
> >   say "waiting for printer to become available"
> > >>>
> > >>> Change this to IPP:// and your printer's address.
> > >>>
> > >>>
> > >>>
> >  perhaps I DONT need to tweak the fw settings in the VM Manager,  but
> >  how or do I need to input the IP of the printer  (I have a DDWRT
> >  router fwiw, if I'm supposed to assign a static IP somehow, and if
> >  that is not going to mess up the other computers using the network
> >  printer)
> > >>>
> > >>> Check what IP address they are printing to.
> > >>>
> > >>>
> >  As a final option,  I don't use sys-usb qubes,  so maybe I could
> >  connect the USB cable  and try it that way instead ... sigh
> > 
> > 
> > >>
> > >>
> > >> thanks for responding , as you can see the common theme, is I've no clue,
> > >> how to find my printer IP , and apparently  it may change if it's not
> > >> static?
> > > 
> > > Look in system-config-printer on one of your working systems. Yes, it
> > > might change if it's not static. How did you set up the other system?
> > > 
> > >> I had been told that the gateway address Was the printer IP  , but I've
> > >> really no idea
> > > 
> > > That's usually incorrect, unless the printer is connected directly to your
> > > router by USB.
> > 
> > The working Linux Mint system says :
> > dnssd://Brother%20HL-L2360D%20series._ipp._tcp.local/ 
> > 
> > I pasted that into the AppVM as root with system-printer-config  ->
> > settings-> change -> IPP (ipp)  
> > and IPP (ipps)   with no luck 
> > 
> > I did notice when I launched system-printer-config in terminal I see:
> > Error creating proxy: The connection is closed (g-io-error-quark, 18)
> > 
> > doing a web search on it but not hopeful 
> > 
> > 
> > 1) does it matter is system-printer-config runs as root or user in AppVM
> > 
> > 2) will re running the driver setup /cups etc tarball package conflict
> > with what I already did in the fedora-26-cloneprinter Template VM ?
> > 
> > 3) I'm afraid static IPs  are going to be a nonstarter  for  chronic 
> > newb as myself  https://dd-wrt.com/phpBB2/viewtopic.php?t=263998
> > 
> > 
> > 4) so much for  qubes printing is so easy  posts I've seen .. even
> > without a sys-usb  :P
> 
> 1) As memory serves, no root required. If it doesn't in a legitimate 
> situation ask for root access, don't use it.
> 
> 2) It might be better to just make a new template, this way you cut away 
> clutter and you're sure you don't introduce new issues. As an alternative, 
> you can make CUPS active in your AppVM instead of your Template, by editing 
> this file /rw/config/rc.local which even has an example inside it for CUPS, 
> all you need to do is remove the three # marks. But keep in mind that this 
> will introduce additional exploit/attack surfaces to your AppVM, since CUPS 
> management will stay permanent between AppVM reboots. But in contrast it will 
> allow you easier management to printer changes, which may be important if you 
> make frequent printer adjustments or use it as a remote printer server which 
> requires server changes on the CUPS server. If you just need to install a 
> printer rarely, then it might be better to keep CUPS in the template, and put 
> the driver/IP-address in the template, so that the AppVM can find it.
> 
> 3) Try see if your printer has a Network or System feature that allows you to 
> print out a print of your printers status and information. Many modern 
> printers, and many of a few years old printers too, have this feature today. 
> It might tell you various good things, like for example a name such as DNS 
> name you can use, which stays the same even if the IP changes dynamically.
> 

Re: [qubes-users] fw for network printer setup

2018-03-05 Thread Yuraeitha
On Friday, March 2, 2018 at 9:51:00 PM UTC+1, yre...@riseup.net wrote:
> On 2018-03-01 18:47, awokd wrote:
> > On Fri, March 2, 2018 4:20 am, yreb...@riseup.net wrote:
> >> On 2018-03-01 18:16, awokd wrote:
> >>
> >>> On Fri, March 2, 2018 4:10 am, yreb...@riseup.net wrote:
> >>>
> >>>
>  When you see the message "Will you specify the DeviceURI ?",
> 
> 
> 
>  For USB Users: Choose N(No)
>  For Network Users: Choose Y(Yes) and DeviceURI number.
>  ---
> 
> 
> 
>  So, I chose "yes" then it wanted something like the IPP:// address
>  ;
> 
> >>>
> >>> You have to put your printer's IP address in here.
> >>>
> >>>
>  I
>  may have put in the gateway address  and got nowhere I guess your
>  saying it doesn't matter if it didn't work in the Template ,
> >>>
> >>> Right, doesn't matter it doesn't work, but put in the right IP address.
> >>>
> >>>
> >>>
>  And for the IP address of the printer in the AppVM use the gateway of
>   the AppVM ?
> 
>  in system-config-printer  there are various options  in settings->
>  device URI: usb://dev/usblp0  is  filled in ,  and in printer state it
>   say "waiting for printer to become available"
> >>>
> >>> Change this to IPP:// and your printer's address.
> >>>
> >>>
> >>>
>  perhaps I DONT need to tweak the fw settings in the VM Manager,  but
>  how or do I need to input the IP of the printer  (I have a DDWRT
>  router fwiw, if I'm supposed to assign a static IP somehow, and if
>  that is not going to mess up the other computers using the network
>  printer)
> >>>
> >>> Check what IP address they are printing to.
> >>>
> >>>
>  As a final option,  I don't use sys-usb qubes,  so maybe I could
>  connect the USB cable  and try it that way instead ... sigh
> 
> 
> >>
> >>
> >> thanks for responding , as you can see the common theme, is I've no clue,
> >> how to find my printer IP , and apparently  it may change if it's not
> >> static?
> > 
> > Look in system-config-printer on one of your working systems. Yes, it
> > might change if it's not static. How did you set up the other system?
> > 
> >> I had been told that the gateway address Was the printer IP  , but I've
> >> really no idea
> > 
> > That's usually incorrect, unless the printer is connected directly to your
> > router by USB.
> 
> The working Linux Mint system says :
> dnssd://Brother%20HL-L2360D%20series._ipp._tcp.local/ 
> 
> I pasted that into the AppVM as root with system-printer-config  ->
> settings-> change -> IPP (ipp)  
> and IPP (ipps)   with no luck 
> 
> I did notice when I launched system-printer-config in terminal I see:
> Error creating proxy: The connection is closed (g-io-error-quark, 18)
> 
> doing a web search on it but not hopeful 
> 
> 
> 1) does it matter is system-printer-config runs as root or user in AppVM
> 
> 2) will re running the driver setup /cups etc tarball package conflict
> with what I already did in the fedora-26-cloneprinter Template VM ?
> 
> 3) I'm afraid static IPs  are going to be a nonstarter  for  chronic 
> newb as myself  https://dd-wrt.com/phpBB2/viewtopic.php?t=263998
> 
> 
> 4) so much for  qubes printing is so easy  posts I've seen .. even
> without a sys-usb  :P

Also as far as I know, Qubes firewall only acts as a NAT, which means it blocks 
in-coming network, but not out-bound network. So if you initiate the connection 
to the printer, it should then allow a full connection for the printer to reach 
back to the AppVM. Last time I did a printer VM, I didn't need anything fancy 
here, it just worked by putting the printers IP (or its DNS network name 
address). So I don't think you need to mess with firewall networking, I'm 
almost sure you only need the address, which the printer should be able to 
print out for you in its settings menu.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2bc856a3-832a-4532-b61f-c09261a15f1e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-05 Thread Yuraeitha
On Friday, March 2, 2018 at 9:51:00 PM UTC+1, yre...@riseup.net wrote:
> On 2018-03-01 18:47, awokd wrote:
> > On Fri, March 2, 2018 4:20 am, yreb...@riseup.net wrote:
> >> On 2018-03-01 18:16, awokd wrote:
> >>
> >>> On Fri, March 2, 2018 4:10 am, yreb...@riseup.net wrote:
> >>>
> >>>
>  When you see the message "Will you specify the DeviceURI ?",
> 
> 
> 
>  For USB Users: Choose N(No)
>  For Network Users: Choose Y(Yes) and DeviceURI number.
>  ---
> 
> 
> 
>  So, I chose "yes" then it wanted something like the IPP:// address
>  ;
> 
> >>>
> >>> You have to put your printer's IP address in here.
> >>>
> >>>
>  I
>  may have put in the gateway address  and got nowhere I guess your
>  saying it doesn't matter if it didn't work in the Template ,
> >>>
> >>> Right, doesn't matter it doesn't work, but put in the right IP address.
> >>>
> >>>
> >>>
>  And for the IP address of the printer in the AppVM use the gateway of
>   the AppVM ?
> 
>  in system-config-printer  there are various options  in settings->
>  device URI: usb://dev/usblp0  is  filled in ,  and in printer state it
>   say "waiting for printer to become available"
> >>>
> >>> Change this to IPP:// and your printer's address.
> >>>
> >>>
> >>>
>  perhaps I DONT need to tweak the fw settings in the VM Manager,  but
>  how or do I need to input the IP of the printer  (I have a DDWRT
>  router fwiw, if I'm supposed to assign a static IP somehow, and if
>  that is not going to mess up the other computers using the network
>  printer)
> >>>
> >>> Check what IP address they are printing to.
> >>>
> >>>
>  As a final option,  I don't use sys-usb qubes,  so maybe I could
>  connect the USB cable  and try it that way instead ... sigh
> 
> 
> >>
> >>
> >> thanks for responding , as you can see the common theme, is I've no clue,
> >> how to find my printer IP , and apparently  it may change if it's not
> >> static?
> > 
> > Look in system-config-printer on one of your working systems. Yes, it
> > might change if it's not static. How did you set up the other system?
> > 
> >> I had been told that the gateway address Was the printer IP  , but I've
> >> really no idea
> > 
> > That's usually incorrect, unless the printer is connected directly to your
> > router by USB.
> 
> The working Linux Mint system says :
> dnssd://Brother%20HL-L2360D%20series._ipp._tcp.local/ 
> 
> I pasted that into the AppVM as root with system-printer-config  ->
> settings-> change -> IPP (ipp)  
> and IPP (ipps)   with no luck 
> 
> I did notice when I launched system-printer-config in terminal I see:
> Error creating proxy: The connection is closed (g-io-error-quark, 18)
> 
> doing a web search on it but not hopeful 
> 
> 
> 1) does it matter is system-printer-config runs as root or user in AppVM
> 
> 2) will re running the driver setup /cups etc tarball package conflict
> with what I already did in the fedora-26-cloneprinter Template VM ?
> 
> 3) I'm afraid static IPs  are going to be a nonstarter  for  chronic 
> newb as myself  https://dd-wrt.com/phpBB2/viewtopic.php?t=263998
> 
> 
> 4) so much for  qubes printing is so easy  posts I've seen .. even
> without a sys-usb  :P

1) As memory serves, no root required. If it doesn't in a legitimate situation 
ask for root access, don't use it.

2) It might be better to just make a new template, this way you cut away 
clutter and you're sure you don't introduce new issues. As an alternative, you 
can make CUPS active in your AppVM instead of your Template, by editing this 
file /rw/config/rc.local which even has an example inside it for CUPS, all you 
need to do is remove the three # marks. But keep in mind that this will 
introduce additional exploit/attack surfaces to your AppVM, since CUPS 
management will stay permanent between AppVM reboots. But in contrast it will 
allow you easier management to printer changes, which may be important if you 
make frequent printer adjustments or use it as a remote printer server which 
requires server changes on the CUPS server. If you just need to install a 
printer rarely, then it might be better to keep CUPS in the template, and put 
the driver/IP-address in the template, so that the AppVM can find it.

3) Try see if your printer has a Network or System feature that allows you to 
print out a print of your printers status and information. Many modern 
printers, and many of a few years old printers too, have this feature today. It 
might tell you various good things, like for example a name such as DNS name 
you can use, which stays the same even if the IP changes dynamically.

4) Are you on Qubes 4? That might be why it's a bit more tricky now, since the 
template has no network access to verify if it works or not, while Qubes 3.2. 
templates had network access.

Another work-around, which is by no means official approach, is to disable your 
networks internet access a

Re: [qubes-users] fw for network printer setup

2018-03-02 Thread yrebstv
On 2018-03-01 18:47, awokd wrote:
> On Fri, March 2, 2018 4:20 am, yreb...@riseup.net wrote:
>> On 2018-03-01 18:16, awokd wrote:
>>
>>> On Fri, March 2, 2018 4:10 am, yreb...@riseup.net wrote:
>>>
>>>
 When you see the message "Will you specify the DeviceURI ?",



 For USB Users: Choose N(No)
 For Network Users: Choose Y(Yes) and DeviceURI number.
 ---



 So, I chose "yes" then it wanted something like the IPP:// address
 ;

>>>
>>> You have to put your printer's IP address in here.
>>>
>>>
 I
 may have put in the gateway address  and got nowhere I guess your
 saying it doesn't matter if it didn't work in the Template ,
>>>
>>> Right, doesn't matter it doesn't work, but put in the right IP address.
>>>
>>>
>>>
 And for the IP address of the printer in the AppVM use the gateway of
  the AppVM ?

 in system-config-printer  there are various options  in settings->
 device URI: usb://dev/usblp0  is  filled in ,  and in printer state it
  say "waiting for printer to become available"
>>>
>>> Change this to IPP:// and your printer's address.
>>>
>>>
>>>
 perhaps I DONT need to tweak the fw settings in the VM Manager,  but
 how or do I need to input the IP of the printer  (I have a DDWRT
 router fwiw, if I'm supposed to assign a static IP somehow, and if
 that is not going to mess up the other computers using the network
 printer)
>>>
>>> Check what IP address they are printing to.
>>>
>>>
 As a final option,  I don't use sys-usb qubes,  so maybe I could
 connect the USB cable  and try it that way instead ... sigh


>>
>>
>> thanks for responding , as you can see the common theme, is I've no clue,
>> how to find my printer IP , and apparently  it may change if it's not
>> static?
> 
> Look in system-config-printer on one of your working systems. Yes, it
> might change if it's not static. How did you set up the other system?
> 
>> I had been told that the gateway address Was the printer IP  , but I've
>> really no idea
> 
> That's usually incorrect, unless the printer is connected directly to your
> router by USB.

The working Linux Mint system says :
dnssd://Brother%20HL-L2360D%20series._ipp._tcp.local/ 

I pasted that into the AppVM as root with system-printer-config  ->
settings-> change -> IPP (ipp)  
and IPP (ipps)   with no luck 

I did notice when I launched system-printer-config in terminal I see:
Error creating proxy: The connection is closed (g-io-error-quark, 18)

doing a web search on it but not hopeful 


1) does it matter is system-printer-config runs as root or user in AppVM

2) will re running the driver setup /cups etc tarball package conflict
with what I already did in the fedora-26-cloneprinter Template VM ?

3) I'm afraid static IPs  are going to be a nonstarter  for  chronic 
newb as myself  https://dd-wrt.com/phpBB2/viewtopic.php?t=263998


4) so much for  qubes printing is so easy  posts I've seen .. even
without a sys-usb  :P



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9098b02a093c155c3d1a238ef9226de4%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-01 Thread 'awokd' via qubes-users
On Fri, March 2, 2018 4:10 am, yreb...@riseup.net wrote:

> When you see the message "Will you specify the DeviceURI ?",
>
>
> For USB Users: Choose N(No)
> For Network Users: Choose Y(Yes) and DeviceURI number.
> ---
>
>
> So, I chose "yes" then it wanted something like the IPP:// address   ;

You have to put your printer's IP address in here.

> I
> may have put in the gateway address  and got nowhere I guess your saying it
> doesn't matter if it didn't work in the Template ,

Right, doesn't matter it doesn't work, but put in the right IP address.


> And for the IP address of the printer in the AppVM use the gateway of
> the AppVM ?
>
> in system-config-printer  there are various options  in settings-> device
> URI: usb://dev/usblp0  is  filled in ,  and in printer state it
> say "waiting for printer to become available"

Change this to IPP:// and your printer's address.


> perhaps I DONT need to tweak the fw settings in the VM Manager,  but how
> or do I need to input the IP of the printer  (I have a DDWRT router fwiw,
> if I'm supposed to assign a static IP somehow, and if that is not going to
> mess up the other computers using the network printer)

Check what IP address they are printing to.

> As a final option,  I don't use sys-usb qubes,  so maybe I could connect
> the USB cable  and try it that way instead ... sigh
>
>


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/40bb76e567d6ca52a73812e4e25f7c71.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-01 Thread yrebstv
sorry, yes, so if I do  system-config-printer -> settings-> device URI
then click "change" -> find network printer,  and I input the gateway
for the AppVM and it doesn't find the printer , perhaps the printer has
a different  IP  ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e984dad95c661c4ab92ebbb4036334b4%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-01 Thread yrebstv
On 2018-03-01 15:07, awokd wrote:
> On Fri, March 2, 2018 12:20 am, yreb...@riseup.net wrote:
>> per the network printing docs it says to :
>>
>>
>>
>> "Open an AppVM (make sure it’s based on the template where you just
>> installed the printer, normally all AppVMs are based on the default
>> template), and test if printing works. If it doesn’t then probably the
>> AppVM doesn’t have networking access to the printer – in that case
>> adjust the firewall settings for that AppVM in Qubes Manager."
> 
> To break it down:
> 1. Install printer into cloned template, using its network IP
> 2. Shutdown template
> 3. Start AppVM based on the cloned template
I did all this and more , installing the brother driver in the
Template ; however at the end it asks 

---
  When you see the message "Will you specify the DeviceURI ?",

 For USB Users: Choose N(No)
 For Network Users: Choose Y(Yes) and DeviceURI number.
---

So, I chose "yes" then it wanted something like the IPP:// address   ; I
may have put in the gateway address  and got nowhere
I guess your saying it doesn't matter if it didn't work in the Template
, but I'm not sure where and which IP address to put in the AppVM


> 
> If your AppVM is on sys-firewall with no custom firewall rules, you
> shouldn't have to add the printer's IP anywhere (except possibly within
> the AppVM) when you print for the first time.
> 
>> I also couldn't get anything to print from my
>> xubuntu  HVM
> 
> Are you sure the printer is on the network and Linux compatible?.yes , it 
> prints on my other  linux mint machine with the .deb package, though I used 
> the .rpm package in The template 


And for the IP address of the printer in the AppVM use the gateway of
the AppVM ?

in system-config-printer  there are various options  in settings->
device URI: usb://dev/usblp0  is  filled in ,  and in printer state it
say "waiting for printer to become available"

perhaps I DONT need to tweak the fw settings in the VM Manager,  but 
how or do I need to input the IP of the printer  (I have a DDWRT router
fwiw,  if I'm supposed to assign a static IP somehow, and if that is not
going to mess up the other computers using the network printer)

As a final option,  I don't use sys-usb qubes,  so maybe I could connect
the USB cable  and try it that way instead ... sigh

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ebfad100db47e10c9b98ef42ae5a0475%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-01 Thread Qubed One
yreb...@riseup.net:
> per the network printing docs it says to :
> 
> 
> 
> "Open an AppVM (make sure it’s based on the template where you just
> installed the printer, normally all AppVMs are based on the default
> template), and test if printing works. If it doesn’t then probably the
> AppVM doesn’t have networking access to the printer – in that case
> adjust the firewall settings for that AppVM in Qubes Manager."
> 
> 
> How exactly do I do this ?  in 3.2  use the tab for firewall in the VM
> manager , hit the + sign and choose  ? "any" and  what IP  ? neither the
> GW nor the AppVM IP  seems to work 
> 
> I did install the driver in a cloned template VM  but it wouldn't print
> from there , and I gave up ,  I also couldn't get anything to print 
> from my  xubuntu  HVM 


You're halfway there.

It wouldn't print from the template because the templates don't normally
have network access. See here:

https://www.qubes-os.org/doc/software-update-vm/

Network printing can be done multiple ways, so it depends on your setup.
For example, if you only want to print from a certain appvm, you would
choose "Deny all except...", then add a firewall rule in the firewall
tab to allow access to the IP of your printer. Assigning a static IP to
the printer will make things much easier (which would be done on the
printer itself if you're not sure).

Alternatively, if you're trying to both print from a certain appvm and
access the internet from that same appvm, you would choose "Allow all
except..." and then simply make sure that the appvm in question is not
behind a vpn or tor. No specific firewall rules for the printer would be
needed in this case.

Using a xubuntu HVM might be a little trickier, but if it already has
networking set up, the same concepts would apply.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9c4cc164-5271-8f10-3725-e7c9d251a8d2%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] fw for network printer setup

2018-03-01 Thread 'awokd' via qubes-users
On Fri, March 2, 2018 12:20 am, yreb...@riseup.net wrote:
> per the network printing docs it says to :
>
>
>
> "Open an AppVM (make sure it’s based on the template where you just
> installed the printer, normally all AppVMs are based on the default
> template), and test if printing works. If it doesn’t then probably the
> AppVM doesn’t have networking access to the printer – in that case
> adjust the firewall settings for that AppVM in Qubes Manager."

To break it down:
1. Install printer into cloned template, using its network IP
2. Shutdown template
3. Start AppVM based on the cloned template

If your AppVM is on sys-firewall with no custom firewall rules, you
shouldn't have to add the printer's IP anywhere (except possibly within
the AppVM) when you print for the first time.

> I also couldn't get anything to print from my
> xubuntu  HVM

Are you sure the printer is on the network and Linux compatible?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/03e19f13b00b416647d636dea88a3238.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] fw for network printer setup

2018-03-01 Thread yrebstv
per the network printing docs it says to :



"Open an AppVM (make sure it’s based on the template where you just
installed the printer, normally all AppVMs are based on the default
template), and test if printing works. If it doesn’t then probably the
AppVM doesn’t have networking access to the printer – in that case
adjust the firewall settings for that AppVM in Qubes Manager."


How exactly do I do this ?  in 3.2  use the tab for firewall in the VM
manager , hit the + sign and choose  ? "any" and  what IP  ? neither the
GW nor the AppVM IP  seems to work 

I did install the driver in a cloned template VM  but it wouldn't print
from there , and I gave up ,  I also couldn't get anything to print 
from my  xubuntu  HVM 


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/08f016e064f69ca711d9f20b5a05a8fa%40riseup.net.
For more options, visit https://groups.google.com/d/optout.