Firewall Configuration - Ports Used by PaperCut NG and PaperCut MF

KB Home   |   Firewall Configuration - Ports Used by PaperCut NG and PaperCut MF

Main.FirewallPorts History

Hide minor edits - Show changes to output

September 12, 2017, at 02:12 AM by peterf - Revised GCP section to reflect change of proxy requirement in 17.3
Changed lines 1-2 from:
(:title Firewall Configuration - Ports used by PaperCut :)
to:
(:title Firewall Configuration - Ports Used by PaperCut NG and PaperCut MF :)
Changed lines 38-39 from:
PaperCut needs to be able to communicate, without the use of a proxy, to the Google Cloud Print services. This is done on:
to:
PaperCut NG and PaperCut MF need to be able to communicate to the Google Cloud Print services. This is done on:
Added lines 46-47:

By default, this needs to be achievable without the use of a proxy, unless that proxy is "transparent" on TCP ports 80 and 443, and requires no authentication. If running version 17.3 or later of PaperCut NG or PaperCut MF, a proxy server which is not "transparent" may be able to be configured using the instructions found in the following section of the [[https://www.papercut.com/products/ng/manual/applicationserver/topics/mobile-google-cloud-print.html#aanchor794|User Manual]].
Changed line 156 from:
*Inbound
to:
*Outbound
Changed line 161 from:
*Inbound
to:
*Outbound
Changed line 166 from:
*Inbound
to:
*Outbound
April 25, 2017, at 03:50 AM by Mel Zouzoulas - Added Mobility Print ports
Added lines 29-35:

!!! Mobility Print
The following ports must be available:
*[@9163@] HTTP
*[@9164@] HTTPS
*[@53@] DNS
*[@5353@] mDNS
June 03, 2016, at 05:56 AM by Mel Zouzoulas - Added Brother firewall ports
Changed line 56 from:
*Inbound (Device connecting to PaperCut)
to:
*Inbound (device connecting to PaperCut)
Changed line 60 from:
*Inbound (Device connecting to PaperCut)
to:
*Inbound (device connecting to PaperCut)
June 03, 2016, at 05:53 AM by Mel Zouzoulas - Added Brother firewall ports
Deleted line 56:
June 03, 2016, at 05:52 AM by Mel Zouzoulas - Added Brother firewall ports
Added lines 54-58:

!!![=Brother=]
*Inbound (Device connecting to PaperCut)

**[@9191@] TCP/HTTP
May 06, 2016, at 05:19 AM by 203.222.91.204 -
Deleted lines 58-67:

!!![=Cartadis CopiCode-IP=]
*Inbound (Device connecting to PaperCut)
**[@5114@]
**[@9193@]

!!![=Cartadis cPad=]
*Inbound (Device connecting to PaperCut)
**[@9191@]
**[@9192@]
Added lines 81-83:
*Outbound connections from PaperCut to the HP devices on port:
** 7627 (TCP/HTTPS)

December 09, 2015, at 12:13 PM by 188.220.74.101 -
Added lines 54-58:

!!![=Canon=]
*Inbound (Device connecting to PaperCut)
**[@9191@]
**[@9193@]
Changed line 162 from:
[-keywords: port, TCP, fire wall, firewall rules -]
to:
[-keywords: port, TCP, fire wall, firewall rules, anti virus -]
Changed lines 122-123 from:
**[@9191@] TCP
to:
**[@9191@] TCP - for EWB
**[@9192@] TCP - secure messages for EWB
Changed lines 128-130 from:
**[@49629@] TCP (HTTP) for [=SDK2=] only
**
[@49630@] TCP (HTTPS) for [=RD30=] only
to:
**[@49629@] TCP (HTTP) for [=SDK2=] and [=RD30=] only
**[@49630@]
TCP (HTTPS) for [=SDK2=] and [=RD30=] only
January 14, 2015, at 11:22 PM by tim - mention LDAPS for Toshiba
Changed lines 123-124 from:
**[@10389@] TCP
to:
**[@10389@] TCP (LDAP)
**[@10636@] TCP (LDAPS)
Added lines 66-68:
*Outbound (PaperCut connecting to the device)
**[@443@]

Added lines 78-80:
*Outbound (PaperCut connecting to the device)
**[@443@]

December 16, 2014, at 11:14 PM by 203.222.91.204 -
Added lines 65-69:
!!!Dell (AIP)
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]

Added lines 74-78:
!!!Fuji-Xerox (AIP)
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]

Changed lines 132-133 from:
!!!RFIDeas Lantronix
to:
!!![=RFIDeas=] Lantronix
Changed lines 137-138 from:
!!!RFIdeas Ethernet 241
to:
!!![=RFIdeas=] Ethernet 241
November 06, 2014, at 12:41 AM by Rick - added RFIdeas ports
Added lines 132-140:
!!!RFIDeas Lantronix

*Inbound
**[@10001@]

!!!RFIdeas Ethernet 241

*Inbound
**[@2000@]
November 06, 2014, at 12:04 AM by Rick - added Elatec port
Added lines 127-131:
!!!Elatec TWN3 Reader and TCP Converter

*Inbound
**[@7778@]

October 30, 2014, at 05:56 PM by Kyle - Added Outbound Port for Toshiba Eraser
Changed lines 112-113 from:
to:
**[@49630@] TCP (HTTPS) for [=RD30=] only
Changed lines 41-42 from:
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.
to:
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for `PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.

You may specify a custom port, the defaults are below
.
Added lines 40-49:
!!Database connections
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.

* Oracle: [@1521@]
* Microsoft SQL Server: [@1433@]
* Microsoft SQL Server Express: [@1450@]
* `MySQL: [@3306@]
* `PostgreSQL: [@5432@]

Changed line 127 from:
[-keywords: port, TCP, fire wall, firewall rules -]
to:
[-keywords: port, TCP, fire wall, firewall rules -]
Changed line 26 from:
If using NetBIOS:
to:
If using `NetBIOS:
December 30, 2013, at 07:54 PM by Kyle - Adding ports 445 TCP SMB and 137-139 NetBIOS ports for Cross-Server Job Redirection
Added lines 22-29:
!!!Cross-Server Job Redirection
Windows Spooler service uses the following ports for redirecting print jobs between a Primary and Secondary server.
*[@445@] TCP, Server Message Block

If using NetBIOS:
*[@137/138@] UDP, Name and Datagram Services
*[@139@] TCP, Session Services

Changed lines 25-27 from:
* [@80@] TCP HTTP
* [@443@] TCP HTTPS

to:
* [@443@] TCP (HTTPS), with connections to:
** [@https://www.googleapis.com/*@]
** [@https://accounts.google.com/*@]
** [@https://www.google.com/cloudprint/*@]
* [@5222@] TCP (XMPP, using STARTTLS), with a persistent connection to:
** [@talk.google.com@]

Added lines 22-27:
!!! Google Cloud Print
PaperCut needs to be able to communicate, without the use of a proxy, to the Google Cloud Print services. This is done on:

* [@80@] TCP HTTP
* [@443@] TCP HTTPS

December 11, 2012, at 05:23 AM by Tim - add a port for Toshiba v2 - and point out others for v1 only
Changed line 78 from:
**[@162@] UDP (SNMP traps)
to:
**[@162@] UDP (SNMP traps) for [=SDK1=] only
Changed lines 80-81 from:
**[@161@] UDP (SNMP)
to:
**[@161@] UDP (SNMP) for [=SDK1=] only
**[@49629@] TCP (HTTP) for [=SDK2=] only

Changed lines 13-14 from:
([[http://www.xmlrpc.com/|XML-RPC]]).  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.
to:
([[http://www.xmlrpc.com/|XML-RPC]]). Sensitive data is sent over SSL/HTTPS on port 9192.  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.
Changed line 19 from:
*Outbound
to:
*Outbound (PaperCut connecting to the device)
Changed line 26 from:
*Inbound
to:
*Inbound (Device connecting to PaperCut)
Changed line 31 from:
*Inbound
to:
*Inbound (Device connecting to PaperCut)
Changed line 40 from:
*Outbound
to:
*Outbound (connecting to the device)
Changed line 43 from:
*Inbound
to:
*Inbound (device connecting to PaperCut)
Deleted line 98:
September 13, 2012, at 03:43 AM by Alec - Removed Mita
Changed line 47 from:
!!!Kyocera-Mita
to:
!!!Kyocera
Added line 49:
**[@9191@] (if using custom logos)
Added line 54:
**[@9191@] (if using custom logos)
Added line 63:
**[@9191@] (if using custom logos)
Deleted line 99:
May 21, 2012, at 06:51 AM by matt - added samsung and cpad
Changed line 25 from:
!!![=CopiCode-IP=]
to:
!!![=Cartadis CopiCode-IP=]
Changed line 30 from:
!!!HP
to:
!!![=Cartadis cPad=]
Added lines 32-36:
**[@9191@]
**[@9192@]

!!!HP
*Inbound
Added lines 59-62:
!!!Samsung
*Inbound
**[@9193@]

Deleted line 97:
Changed lines 81-82 from:
**[@91912@]
to:
**[@9192@]
Changed line 18 from:
!!!SNMP
to:
!!!SNMP (for toner level retrieval)
Changed lines 27-29 from:
**[@5114@] 
to:
**[@5114@]
**[@9193@]
Changed lines 31-32 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 36-37 from:
**[@50003@] 
to:
**[@50003@]
**[@80/443@]
*Inbound
**[@9191@]
**[@9192@]

Changed lines 43-44 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 47-48 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 51-52 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Deleted lines 57-58:

!!!Toshiba
Added lines 59-64:
**[@9191@]
**[@9192@]

!!!Toshiba
*Inbound
**[@9191@] TCP
Changed lines 79-82 from:
to:
*Inbound
**[@9191@]
**[@91912@]

July 11, 2011, at 07:56 AM by peter - Fixed formating
Changed line 25 from:
!!!CopiCode-IP
to:
!!![=CopiCode-IP=]
July 11, 2011, at 07:55 AM by peter - Added CopiCode IP
Added lines 25-27:
!!!CopiCode-IP
*Inbound
**[@5114@]
July 11, 2011, at 07:48 AM by peter - Fixed formating
Changed line 15 from:
!Complete List of Ports Used by PaperCut
to:
!!Complete List of Ports Used by PaperCut
Changed line 18 from:
!!SNMP
to:
!!!SNMP
Changed line 22 from:
!1Device Connections
to:
!!Device Connections
July 11, 2011, at 07:47 AM by peter - Fixed formating
Changed line 15 from:
!Other Ports
to:
!Complete List of Ports Used by PaperCut
Changed line 22 from:
!Device Connections
to:
!1Device Connections
Changed line 25 from:
!!HP
to:
!!!HP
Changed line 28 from:
!!Konica-Minolta
to:
!!!Konica-Minolta
Changed line 32 from:
!!Kyocera-Mita
to:
!!!Kyocera-Mita
Changed line 35 from:
!!Lexmark
to:
!!!Lexmark
Changed line 38 from:
!!Ricoh
to:
!!!Ricoh
Changed line 41 from:
!Sharp
to:
!!!Sharp
Changed line 46 from:
!!Toshiba
to:
!!!Toshiba
Changed line 53 from:
!!VCC Terminals
to:
!!!VCC Terminals
Changed line 58 from:
!!Xerox
to:
!!!Xerox
July 11, 2011, at 07:46 AM by peter - Updated SNMP
Deleted lines 18-19:
*Inbound
**[@162@] UDP
July 11, 2011, at 07:39 AM by peter - Fixed formating
Changed lines 25-26 from:
PaperCut MF uses a variety of port for connecting to copiers, MFPs and other devices. These are listed below by device.
to:
PaperCut MF uses a variety of port for connecting to copiers, [=MFPs=] and other devices. These are listed below by device.
Deleted lines 37-38:

!!Ricoh
Added lines 40-42:
!!Ricoh
Uses only the standard PaperCut ports.

July 11, 2011, at 07:36 AM by peter - Adding device ports
Changed line 20 from:
** [@162@] UDP
to:
**[@162@] UDP
Changed lines 22-23 from:
** [@161@] UDP
to:
**[@161@] UDP
Changed lines 30-34 from:
!!Ricoh
to:
!!Konica-Minolta
*Outbound
**[@50003@]

!!Kyocera-Mita
Added lines 37-46:
!!Lexmark

!!Ricoh
Uses only the standard PaperCut ports.

!Sharp
*Outbound
**[@80@]
**[@443@]

Changed lines 49-50 from:
** [@10389@] TCP
** [@162@] UDP (SNMP traps)
to:
**[@10389@] TCP
**[@162@] UDP (SNMP traps)
Changed lines 52-54 from:
** [@161@] UDP

to:
**[@161@] UDP (SNMP)

!!VCC Terminals
*Outbound
**[@1234@]
**[@1235@]

!!Xerox
*Outbound
**[@80@]
**[@443@]

Added lines 69-70:

July 11, 2011, at 07:27 AM by peter - Adding SNMP ports
Changed line 5 from:
A: The network TCP ports used by PaperCut are:
to:
A: The main network TCP ports used by PaperCut are:
Changed lines 10-11 from:
UDP ports are not used, only standard TCP.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation or secondary server.
to:
UDP ports are not used for connections from PaperCut client to the sever, only standard TCP.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation or secondary server.
Added lines 15-40:
!Other Ports
PaperCut also uses ports for a variety of other protocols.

!!SNMP
*Inbound
** [@162@] UDP
*Outbound
** [@161@] UDP

!Device Connections
PaperCut MF uses a variety of port for connecting to copiers, MFPs and other devices. These are listed below by device.

!!HP
Uses only the standard PaperCut ports.

!!Ricoh
Uses only the standard PaperCut ports.

!!Toshiba
*Inbound
** [@10389@] TCP
** [@162@] UDP (SNMP traps)
*Outbound
** [@161@] UDP

Changed lines 12-13 from:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication ([[http://www.xmlrpc.com/|XML-RPC]]).
to:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication
([[http://www.xmlrpc.com/|XML-RPC]]).  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.
Changed line 5 from:
A: The TCP ports used by PaperCut are:
to:
A: The network TCP ports used by PaperCut are:
Changed lines 17-18 from:
[-keywords: port, TCP, firewall rules -]
to:
[-keywords: port, TCP, fire wall, firewall rules -]
Changed lines 12-13 from:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication.
to:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication ([[http://www.xmlrpc.com/|XML-RPC]]).
Changed lines 6-9 from:
* 9191 for HTTP connections
* 9192 for secure HTTP/SSL connection
* 9193 for device RPC
to:
* [@9191@] for HTTP connections
* [@9192@] for secure HTTP/SSL connection
* [@9193@] for device RPC (only used for embedded copier/MFP solutions)
Changed lines 5-6 from:
A: The TCP ports used by PaperCut are 9191 for HTTP connections and 9192 for secure HTTP/SSL connection.  UDP ports are not used.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation or secondary server.
to:
A: The TCP ports used by PaperCut are:
*
9191 for HTTP connections
* 9192 for secure HTTP/SSL connection
* 9193 for device RPC

UDP ports are not
used, only standard TCP.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation or secondary server.
Changed lines 5-6 from:
A: The TCP ports used by PaperCut are 9191 for HTTP connections and 9192 for secure HTTP/SSL connection.  UDP ports are not used.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation.
to:
A: The TCP ports used by PaperCut are 9191 for HTTP connections and 9192 for secure HTTP/SSL connection.  UDP ports are not used.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation or secondary server.
Changed lines 7-8 from:
A:  PaperCut uses standard HTTP XML WebServices for client-server and server-server communication.
to:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication.
Changed lines 3-4 from:
Q: What ports does PaperCut use?
to:
Q: I would like to configure a firewall on the server. What ports does PaperCut use? 
Changed lines 3-4 from:
Q: What ports does PaperCut use.
to:
Q: What ports does PaperCut use?
Added lines 1-13:
(:title Firewall Configuration - Ports used by PaperCut :)

Q: What ports does PaperCut use.

A: The TCP ports used by PaperCut are 9191 for HTTP connections and 9192 for secure HTTP/SSL connection.  UDP ports are not used.  All connections are made inbound from clients and secondary servers to the primary server.  No outbound connections are made by the primary server to any workstation.

A:  PaperCut uses standard HTTP XML WebServices for client-server and server-server communication.

----
''Categories:'' [[Category.Implementation|+]], [[Category.Architecture|+]]
----
[-keywords: port, TCP, firewall rules -]

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on September 12, 2017, at 02:12 AM
Printable View   |   Article History   |   Edit Article