On Thursday 2008-08-14 14:51, Stephen Isard wrote: > I'm wondering whether there are iptables rules that will permit > cups snmp printer discovery to operate without creating a serious > security risk. CUPS does not actually use SNMP, does it? The way I have seen its output are regular UDP transmissions from and to port 631, without any replies (much like most NBT packets). -d 192.168.0.255 -p udp --dport 631 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html