Cups listen on 0.0.0.0

pipitas at gmail.com pipitas at gmail.com
Fri Apr 30 02:59:22 PDT 2010


> How can i get my cups mor secure? Are there any unpleasant statements in
> my cups.conf?

You probably have a statement like

  Browsing On

in your cupsd.conf. This will cause cupsd to listen on port 631 for remote cupsd printer announcment messages (via UDP, not TCP).

If you don't want this, change it to

  Browsing Off

The most secure you can get (and still print locally as well as having the web admin interface) is if you reduce the "Listen" statements to 127.0.0.1 (and make sure you don't have a "Port" statement hidden somewhere). If you don't need the web admin, you can run cupsd for local printing with just the statement

  Listen /path/to/unix/domain/socket/file

(CUPS will create the file if it doesn't exist).




More information about the cups mailing list