Shorewall users - Aug 2007 - Shorewall and printing problems in the LAN ( loc ) zone

Guys,


Just a quick check. From what i have read in the
shorewall site, intrazone traffic is allowed
completely by shorewall i.e. there is no filtering or
packet size limiting ,etc,etc.

I ask this becos after getting shorewall up and
running well, someone has complained that they cannot
print pdf files larger than 100k at one go but that
they have to print one page at a time.

Some details;

interface - eth1 ( 192.168.2.x)
- printer type - fuji xerox photocopier/printer (
192.168.2.99)
-there is also a squid transparent proxy runnig on the
shorewall machine.


But, printing from a machine in the LAN zone to a
printer in the LAN zone shoud not be affected right?

regards,
marco.


       
____________________________________________________________________________________
Boardwalk for $500? In 2007? Ha! Play Monopoly Here and Now (it''s
updated for today''s economy) at Yahoo! Games.
http://get.games.yahoo.com/proddesc?gamekey=monopolyherenow  

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

Linux Advocate wrote:
> ...
> But, printing from a machine in the LAN zone to a
> printer in the LAN zone shoud not be affected right?
That''s right.  If your two LAN systems are in the same subnet, your
shorewall system is probably not even seeing the traffic.  If you want
to look into it a bit further, throw a shorewall dump into
http://rafb.net/paste/ and someone can look at it.

-- 
Paul
<http://paulgear.webhop.net>
--

Did you know?  Linux is a completely free operating system that provides
a vast array of software "out of the box", and represents a viable
alternative to expensive proprietary software.  For more details, see:
http://consumer.hardocp.com/article.html?art=MTI5OCwxLCxoY29uc3VtZXI


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

Paul Gear wrote:
> Linux Advocate wrote:
>> ...
>> But, printing from a machine in the LAN zone to a
>> printer in the LAN zone shoud not be affected right?
> 
> That''s right.  If your two LAN systems are in the same subnet,
your
> shorewall system is probably not even seeing the traffic.  If you want
> to look into it a bit further, throw a shorewall dump into
> http://rafb.net/paste/ and someone can look at it.
Another test would be to ''shorewall clear'' and see if printing
improves
(be sure to ''shorewall start'' after the test).

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

thanx paul.

i will get a shorewall dump when i go over to the
branch office. give me a couple of days. 

i just wanted to get an opinion on whether my
understanding of shorewall ( pertaining to traffic
within a zone ) was right.


--- Paul Gear <paul@gear.dyndns.org> wrote:
> Linux Advocate wrote:
> > ...
> > But, printing from a machine in the LAN zone to a
> > printer in the LAN zone shoud not be affected
> right?
> 
> That''s right.  If your two LAN systems are in the
> same subnet, your
> shorewall system is probably not even seeing the
> traffic.  If you want
> to look into it a bit further, throw a shorewall
> dump into
> http://rafb.net/paste/ and someone can look at it.
> 
> -- 
> Paul
> <http://paulgear.webhop.net>
> --
> 
> Did you know?  Linux is a completely free operating
> system that provides
> a vast array of software "out of the box", and
> represents a viable
> alternative to expensive proprietary software.  For
> more details, see:
>
http://consumer.hardocp.com/article.html?art=MTI5OCwxLCxoY29uc3VtZXI>
> >
-------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
> Stop.
> Now Search log events and configuration files using
> AJAX and a browser.
> Download your FREE copy of Splunk now >> 
http://get.splunk.com/>
_______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
>
https://lists.sourceforge.net/lists/listinfo/shorewall-users
> 


     
____________________________________________________________________________________
Luggage? GPS? Comic books? 
Check out fitting gifts for grads at Yahoo! Search
http://search.yahoo.com/search?fr=oni_on_mail&p=graduation+gifts&cs=bz

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

But tom, my understanding of traffic within a zone is
correct right? shorewall doesn''t do anything to
traffic in a zone , between machines/ printers right?

i am just a little stubborn because that was what i
told the user.... shorewall will not disturb printing
as both the computer and the printer are in the same
zone.


is printing does improe when i do ''shorewall clear''
what setting would i need to do ?

--- Tom Eastep <teastep@shorewall.net> wrote:
> Paul Gear wrote:
> > Linux Advocate wrote:
> >> ...
> >> But, printing from a machine in the LAN zone to a
> >> printer in the LAN zone shoud not be affected
> right?
> > 
> > That''s right.  If your two LAN systems are in the
> same subnet, your
> > shorewall system is probably not even seeing the
> traffic.  If you want
> > to look into it a bit further, throw a shorewall
> dump into
> > http://rafb.net/paste/ and someone can look at it.
> 
> Another test would be to ''shorewall clear'' and see
> if printing improves
> (be sure to ''shorewall start'' after the test).
> 
> -Tom


       
____________________________________________________________________________________Ready
for the edge of your seat?
Check out tonight''s top picks on Yahoo! TV. 
http://tv.yahoo.com/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

On 8/15/07, Linux Advocate <linuxhousedn@yahoo.com>
wrote:
> But tom, my understanding of traffic within a zone is
> correct right? shorewall doesn''t do anything to
> traffic in a zone , between machines/ printers right?
assuming that the printer and machine are on the same switch, the
traffic will not even hit the shorewall machine.

Prasanna.


-- 
www.elinanetworks.com
Seamless, secure delivery of applications.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

yes, they are on the same switch...

--- Prasanna Krishnamoorthy <prasanna79@gmail.com>
wrote:
> On 8/15/07, Linux Advocate <linuxhousedn@yahoo.com>
> wrote:
> > But tom, my understanding of traffic within a zone
> is
> > correct right? shorewall doesn''t do anything to
> > traffic in a zone , between machines/ printers
> right?
> assuming that the printer and machine are on the
> same switch, the
> traffic will not even hit the shorewall machine.
> 
> Prasanna.
> 
> 


       
____________________________________________________________________________________
Got a little couch potato? 
Check out fun summer activities for kids.
http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

Guys, the Fuji xerox photocopier / printer technician
came over and adjusted some ''printer spool'' setting in
the machine. now all printing is ok.

thanx for everyone''s input. glad to know it had
nothing to do with shorewall....


--- Linux Advocate <linuxhousedn@yahoo.com> wrote:
> yes, they are on the same switch...
> 
> --- Prasanna Krishnamoorthy <prasanna79@gmail.com>
> wrote:
> 
> > On 8/15/07, Linux Advocate
> <linuxhousedn@yahoo.com>
> > wrote:
> > > But tom, my understanding of traffic within a
> zone
> > is
> > > correct right? shorewall doesn''t do anything to
> > > traffic in a zone , between machines/ printers
> > right?
> > assuming that the printer and machine are on the
> > same switch, the
> > traffic will not even hit the shorewall machine.
> > 
> > Prasanna.
> > 
> > 
> 
> 
> 
>        
>
____________________________________________________________________________________
> Got a little couch potato? 
> Check out fun summer activities for kids.
>
http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz
> 
> 
>
-------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
> Stop.
> Now Search log events and configuration files using
> AJAX and a browser.
> Download your FREE copy of Splunk now >> 
> http://get.splunk.com/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
>
https://lists.sourceforge.net/lists/listinfo/shorewall-users
> 


       
____________________________________________________________________________________
Be a better Globetrotter. Get better travel answers from someone who knows.
Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=list&sid=396545469

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

Linux Advocate wrote:
> But tom, my understanding of traffic within a zone is
> correct right? shorewall doesn''t do anything to
> traffic in a zone , between machines/ printers right?
Correct.
> 
> i am just a little stubborn because that was what i
> told the user.... shorewall will not disturb printing
> as both the computer and the printer are in the same
> zone.
> 
> 
> is printing does improe when i do ''shorewall clear''
> what setting would i need to do ?
You posted on this list asking if this could be a Shorewall problem (even
though you thought it wasn''t). I just gave you a simple way to prove to
yourself that it wasn''t. I had no expectation that printing would
improve.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/