Firewall Ports used by NG & MF

KB Home   |   Firewall Ports used by NG & MF

Main.FirewallPorts History

Show minor edits - Show changes to output

August 20, 2019, at 02:31 AM by Jake - Added section for Print Deploy, linked to Help Center
Added lines 89-91:

!! Print Deploy
See the [[https://www.papercut.com/support/resources/manuals/print-deploy/set-up-print-deploy/topics/system-requirements.html#firewall-rules-protocols-ports|Print Deploy system requirements page]] which shows the ports and protocols we use.
August 15, 2019, at 11:13 AM by Steve Grant - Changed term On-premise to Locally hosted
Changed line 79 from:
!!Integrated Scanning - On-premise OCR
to:
!!Integrated Scanning - Locally hosted OCR (On-premise)
Changed line 81 from:
*[@9181@] TCP (HTTPS) inbound on the On-premise OCR Server
to:
*[@9181@] TCP (HTTPS) inbound on the Locally hosted OCR Server
July 16, 2019, at 06:30 AM by Mel Zouzoulas - Linked to Mobility Print known host
July 16, 2019, at 06:16 AM by Mel Zouzoulas - Linked to Mobility Print known host
Changed line 98 from:
The following port and URL endpoints must be externally available for retrieval of the client setup files when setting up Mobility Print with a Known Host:
to:
The following port and URL endpoints must be externally available for retrieval of the client setup files when setting up Mobility Print with a [[https://www.papercut.com/support/resources/manuals/mobility-print/mobility-print-server/topics/discover-printers-known-host.html|Known Host]]:
Added lines 97-103:

The following port and URL endpoints must be externally available for retrieval of the client setup files when setting up Mobility Print with a Known Host:
*[@443@] TCP (HTTPS), with connections to:
** [@https://www.papercut.com/api/product/mobility-print/latest/client/windows@]
** [@https://www.papercut.com/api/product/mobility-print/latest/client/macos@]
** [@https://www.papercut.com/api/product/mobility-print/latest/client/android@]
** [@https://ios-profile-signing-dot-pc-mobility-print.appspot.com/sign-profile/v1@]
June 20, 2019, at 04:17 AM by 139.130.165.134 -
Added line 108:
**[@9192@]
Changed lines 146-147 from:
**[@9191@] (if using custom logos)
to:
**[@9191@]
**[@9192@]
Changed lines 152-153 from:
**[@9191@] (if using custom logos)
to:
**[@9191@]
**[@9192@]
Added line 165:
**[@9191@]
Added line 172:
**[@9192@]
June 03, 2019, at 04:01 AM by Mel Zouzoulas - Updated to link to the Mobility Print system requirements page
Changed lines 91-92 from:
The link below takes you to the Mobility Print system requirements page that shows the ports and protocols we use:
https://www.papercut.com/support/resources/manuals/mobility-print/mobility-print-server/topics/system-requirements.html#firewall-rules-protocols-ports
to:
See the [[https://www.papercut.com/support/resources/manuals/mobility-print/mobility-print-server/topics/system-requirements.html#firewall-rules-protocols-ports|Mobility Print system requirements page]] which shows the ports and protocols we use.
June 03, 2019, at 03:59 AM by Mel Zouzoulas - Updated to link to the Mobility Print system requirements page
Changed lines 91-95 from:
The following ports must be available for internal communications:
*[@9163@] (HTTP)  inbound TCP to
the Mobility Print Server
*[@9164@] (HTTPS)  inbound TCP to the Mobility Print Server
*[@53@] DNS  inbound and outbound UDP to
/from DNS server to/from Mobility Print Server
*[@5353@] mDNS  inbound and outbound UDP to
/from the Mobility Print Server
to:
The link below takes you to the Mobility Print system requirements page that shows the ports and protocols we use:
https:
//www.papercut.com/support/resources/manuals/mobility-print/mobility-print-server/topics/system-requirements.html#firewall-rules-protocols-ports
Changed lines 62-65 from:
!! Integrated Scanning - OCR Cloud Service &  Scan to Cloud Storage
The following port and URL endpoints must be externally available for a PaperCut server to upload files
to  PaperCut Cloud Services:
*[@443@] TCP (HTTPS), with connection to:
**[@https://storage.googleapis.com/*@]
to:
!!PaperCut MF Cloud Services (Integrated Scanning with Scan to Cloud and/or Cloud OCR)
For a PaperCut server to have content processed by PaperCut MF Cloud Services it must be able
to form an outgoing connection to the following endpoints:
* [@443@] TCP (HTTPS), with connection to:
** [@https://*.papercut.com/*@]
** [@https://storage.googleapis.com/*@]
the following specific URLs are used, depending on your PaperCut version and PaperCut MF Cloud Services hosting region, in case you are unable to use a wildcard in the domain part:
* [@443@] TCP (HTTPS), with connection to:
** [@https://scan.cloud.papercut
.com/*@]
Changed lines 71-80 from:
** [@https://scan.papercut.com/*@]
**[@https://scan.au.cloud.papercut.com/*@]
**[@https://ocr.au.cloud.papercut.com/*@]
**[@https://scan.eu.cloud.papercut.com/*@]
**[@https://ocr.eu.cloud.papercut.com/*@]
**[@https://scan.us.cloud.papercut.com/*@]
**[@https://ocr.us.cloud.papercut.com/*@]


!!
Integrated Scanning - On-premise OCR
to:
** [@https://scan.au.cloud.papercut.com/*@]
** [@https://ocr.au.cloud.papercut.com/*@]
** [@https://scan.eu.cloud.papercut.com/*@]
** [@https://ocr.eu.cloud.papercut.com/*@]
** [@https://scan.us.cloud.papercut.com/*@]
** [@https://ocr.us.cloud.papercut.com/*@]
** [@https://scan.papercut.com/*@] (legacy)

!!
Integrated Scanning - On-premise OCR
Changed lines 81-82 from:
*[@9181@] (HTTPS) inbound TCP to the On-premise OCR Server
to:
*[@9181@] TCP (HTTPS) inbound on the On-premise OCR Server
(The Windows Firewall is configured automatically by the installer. Manual configuration is only required if using an off-box or 3rd party software firewall.)
April 23, 2019, at 04:28 PM by Aaron Pouliot - Added additional Scan to Cloud Storage URLS
April 23, 2019, at 04:28 PM by Aaron Pouliot - Added additional Scan to Cloud Storage URLS
Added lines 68-74:
**[@https://scan.au.cloud.papercut.com/*@]
**[@https://ocr.au.cloud.papercut.com/*@]
**[@https://scan.eu.cloud.papercut.com/*@]
**[@https://ocr.eu.cloud.papercut.com/*@]
**[@https://scan.us.cloud.papercut.com/*@]
**[@https://ocr.us.cloud.papercut.com/*@]

Changed lines 69-72 from:
!! Integrated Scanning - On Premise OCR
Coming soon in 19.0
On Premise OCR requires the following port:
*[@9181@] (HTTPS) Inbound and Outbound
to:
!! Integrated Scanning - On-premise OCR
Part of the [[https://www.papercut.com/products/percolator/project-wollemi/|Project Wollemi]] percolator.
*[@9181@] (HTTPS) inbound TCP to the On-premise OCR Server
March 29, 2019, at 03:46 AM by timg - Added note about source port 'any' for Google LDAP
Added line 48:
Note: make sure any firewall rules allow "any" as source port for the PaperCut server in this case. The source/client port is dynamically allocated, and not meaningful.
March 28, 2019, at 01:24 AM by Peter Shanley - Added an extra port for Toshiba
Added line 182:
**[@50083@] TCP (HTTP) - for V3
March 19, 2019, at 10:08 AM by Steve Grant - Added On-Prem OCR ports
Changed line 61 from:
!! Integrated Scanning - OCR &  Scan to Cloud Storage
to:
!! Integrated Scanning - OCR Cloud Service &  Scan to Cloud Storage
Added lines 67-71:

!! Integrated Scanning - On Premise OCR
Coming soon in 19.0
On Premise OCR requires the following port:
*[@9181@] (HTTPS) Inbound and Outbound
February 20, 2019, at 11:27 PM by Brad Stone - Added further detail to mobility print ports re inbound/outbound and TCP & UDP
Changed lines 76-79 from:
*[@9163@] HTTP
*[@9164@] HTTPS
*[@53@] DNS
*[@5353@] mDNS
to:
*[@9163@] (HTTP)  inbound TCP to the Mobility Print Server
*[@9164@] (HTTPS)  inbound TCP to the Mobility Print Server
*[@53@] DNS  inbound and outbound UDP to/from DNS server to/from Mobility Print Server
*[@5353@] mDNS  inbound and outbound UDP to/from the Mobility Print Server
February 13, 2019, at 12:47 PM by Jack Lawless - Title change
Changed line 1 from:
(:title Firewall Configuration - Ports Used by PaperCut NG and PaperCut MF :)
to:
(:title Firewall Ports used by NG & MF :)
February 12, 2019, at 11:52 AM by Jack Lawless - Moooooore formatting
Added lines 15-31:
!!Card Readers

!!!Elatec TWN3 Reader and TCP Converter

*Outbound
**[@7778@]

!!![=RFIDeas=] Lantronix

*Outbound
**[@10001@]

!!![=RFIdeas=] Ethernet 241

*Outbound
**[@2000@]

Deleted lines 190-204:

!!!Elatec TWN3 Reader and TCP Converter

*Outbound
**[@7778@]

!!![=RFIDeas=] Lantronix

*Outbound
**[@10001@]

!!![=RFIdeas=] Ethernet 241

*Outbound
**[@2000@]
February 12, 2019, at 11:49 AM by Jack Lawless - More formatting changes
Deleted lines 14-20:
!! Cloud Services (Scan to Cloud & OCR)
The following port and URL endpoints must be externally available for a PaperCut server to upload files to  PaperCut Cloud Services:
*[@443@] TCP (HTTPS), with connection to:
**[@https://storage.googleapis.com/*@]
** [@https://scan.papercut.com/*@] (Scan to Cloud Storage)
** [@https://ocr.cloud.papercut.com/*@] (Integrated Scanning - OCR)

Added lines 44-50:
!! Integrated Scanning - OCR &  Scan to Cloud Storage
The following port and URL endpoints must be externally available for a PaperCut server to upload files to  PaperCut Cloud Services:
*[@443@] TCP (HTTPS), with connection to:
**[@https://storage.googleapis.com/*@]
** [@https://ocr.cloud.papercut.com/*@]
** [@https://scan.papercut.com/*@]

Added lines 64-68:
The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://mobility-print.papercut.com/*@]
** [@https://storage.googleapis.com/pc-mobility-print.appspot.com/*@]

Deleted lines 189-195:


The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://mobility-print.papercut.com/*@]
** [@https://storage.googleapis.com/pc-mobility-print.appspot.com/*@]

Changed line 191 from:
*Outbound (PaperCut connecting to the device)
to:
*Outbound (PaperCut connecting to the Printer/Device)
Changed lines 195-196 from:
The PaperCut Print Provider service will use TCP/IP ports allocated by the Print Spooler service. 
The Windows Print Service uses the dynamic port range from  49152 to 65535.  Retain this port range when redirecting print jobs between a Primary and Secondary server, Cross-Server Redirection.
to:
The PaperCut Print Provider service will use TCP/IP ports allocated by the Windows Print Spooler service. 
The Windows Print Service uses the dynamic port range from  49152 to 65535.  You will need to retain this port range when redirecting print jobs between a Primary and Secondary server (Cross-Server Redirection).
February 12, 2019, at 10:33 AM by Jack Lawless - Formatting changes/grammar, alphabetical order of subjects
Changed lines 15-58 from:
!!Complete List of Ports Used by PaperCut
PaperCut also uses ports for a variety of other protocols.

!!!SNMP (for toner level retrieval)
*Outbound (PaperCut connecting to the device)
**[@161@] UDP

!!! Mobility Print
The following ports must be available for internal communications:
*[@9163@] HTTP
*[@9164@] HTTPS
*[@53@] DNS
*[@5353@] mDNS

The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://mobility-print.papercut.com/*@]
** [@https://storage.googleapis.com/pc-mobility-print.appspot.com/*@]

!!! Google Cloud Print
PaperCut NG and PaperCut MF need to be able to communicate to the Google Cloud Print services. This is done on:

* [@443@] TCP (HTTPS), with connections to:
** [@https://www.googleapis.com/*@]
** [@https://accounts.google.com/*@]
** [@https://www.google.com/cloudprint/*@]
* [@5222@] TCP (XMPP, using STARTTLS), with a persistent connection to:
** [@talk.google.com@]

By default, this needs to be achievable without the use of a proxy, unless that proxy is "transparent" on TCP ports 80 and 443, and requires no authentication. If running version 17.3 or later of PaperCut NG or PaperCut MF, a proxy server which is not "transparent" may be able to be configured using the instructions found in the following section of the [[https://www.papercut.com/products/ng/manual/applicationserver/topics/mobile-google-cloud-print.html#aanchor794|User Manual]].

!!! Google Cloud Directory
PaperCut NG and PaperCut MF will use Secure LDAP to communicate with the Google Cloud Directory service:

* [@636@] TCP (LDAPS), with outbound connections to:
** [@ldap.google.com@]

!!! Job Ticketing
The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://pc-job-ticketing.appspot.com/*@]
** [@https://storage.googleapis.com/pc-job-ticketing.appspot.com/*@]

!!! PaperCut Cloud Services
to:
!! Cloud Services (Scan to Cloud & OCR)
Changed line 22 from:
!!Database connections
to:
!!External Database
Changed lines 33-34 from:

!!Device Connections
to:
!! Google Cloud Directory
PaperCut NG and PaperCut MF will use Secure LDAP to communicate with the Google Cloud Directory service:

* [@636@] TCP (LDAPS), with outbound connections to:
** [@ldap.google.com@]

!! Google Cloud Print
PaperCut NG and PaperCut MF need to be able to communicate to the Google Cloud Print services. This is done on:

* [@443@] TCP (HTTPS), with connections to:
** [@https://www.googleapis.com/*@]
** [@https://accounts.google.com/*@]
** [@https://www.google.com/cloudprint/*@]
* [@5222@] TCP (XMPP, using STARTTLS), with a persistent connection to:
** [@talk.google.com@]

By default, this needs to be achievable without the use of a proxy, unless that proxy is "transparent" on TCP ports 80 and 443, and requires no authentication. If running version 17.3 or later of PaperCut NG or PaperCut MF, a proxy server which is not "transparent" may be able to be configured using the instructions found in the following section of the [[https://www.papercut.com/products/ng/manual/applicationserver/topics/mobile-google-cloud-print.html#aanchor794|User Manual]].

!! Job Ticketing
The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://pc-job-ticketing.appspot.com/*@]
** [@https://storage.googleapis.com/pc-job-ticketing.appspot.com/*@]

!! Mobility Print
The following ports must be available for internal communications:
*[@9163@] HTTP
*[@9164@] HTTPS
*[@53@] DNS
*[@5353@] mDNS

!!Multi Function Devices
Changed lines 185-196 from:
!!!Windows Print Spooler service
to:


The following port and URL endpoints must be externally available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://mobility-print.papercut.com/*@]
** [@https://storage.googleapis.com/pc-mobility-print.appspot.com/*@]

!! SNMP
*Outbound (PaperCut connecting to the device)
**[@161@] UDP

!! Windows Print Spooler Service
February 12, 2019, at 12:43 AM by Alan Morris - updated this edit to include the dynamic ports in use by Windows Print spooler. Blocking==slow print
Deleted lines 21-28:
!!!Cross-Server Job Redirection
Windows Spooler service uses the following ports for redirecting print jobs between a Primary and Secondary server.
*[@445@] TCP, Server Message Block

If using `NetBIOS:
*[@137/138@] UDP, Name and Datagram Services
*[@139@] TCP, Session Services

Added lines 197-207:

!!!Windows Print Spooler service
The PaperCut Print Provider service will use TCP/IP ports allocated by the Print Spooler service. 
The Windows Print Service uses the dynamic port range from  49152 to 65535.  Retain this port range when redirecting print jobs between a Primary and Secondary server, Cross-Server Redirection.
*[@ 49152-65535@] TCP and UDP

*[@445@] TCP, Server Message Block

If using `NetBIOS:
*[@137/138@] UDP, Name and Datagram Services
*[@139@] TCP, Session Services
December 13, 2018, at 05:30 AM by peterf - Added Google Cloud Directory LDAPS port
Added lines 53-58:

!!! Google Cloud Directory
PaperCut NG and PaperCut MF will use Secure LDAP to communicate with the Google Cloud Directory service:

* [@636@] TCP (LDAPS), with outbound connections to:
** [@ldap.google.com@]
December 12, 2018, at 10:19 AM by Jack Lawless - Added Port 9195 for KM
Added line 119:
**[@9195@] (Required for SHA2 on MF v18.3 onwards)
November 25, 2018, at 11:02 PM by TimG - Formatting update
Added lines 92-94:
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]
Changed lines 98-99 from:
*Inbound (device connecting to PaperCut)
to:
!!!HP
*Inbound
Deleted lines 101-105:

!!!HP
*Inbound
**[@9191@]
**[@9192@]
Changed lines 105-106 from:
** [@80@] (or [@443@] if SSL is enabled)
to:
** [@80 / 443@]
Added lines 108-110:
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]
Added line 115:
!!!Konica-Minolta
Deleted lines 118-119:

!!!Konica-Minolta
Changed lines 122-125 from:
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]

to:
Added lines 151-153:
*Inbound
**[@9191@]
**[@9192@]
Added lines 157-158:

!!!Toshiba
Deleted lines 159-163:
**[@9191@]
**[@9192@]

!!!Toshiba
*Inbound
Deleted lines 175-177:
*Outbound
**[@80@]
**[@443@]
Added lines 179-182:

*Outbound
**[@80@]
**[@443@]
November 25, 2018, at 10:55 PM by TimG - Updated HP outbound to include 80/443 as per customer ticket with Atiq
Changed line 106 from:
to:
** [@80@] (or [@443@] if SSL is enabled)
Changed line 61 from:
The following port and URL endpoints must be externally available for a PaperCut server to upload files to  PaperCut Cloud Services. :
to:
The following port and URL endpoints must be externally available for a PaperCut server to upload files to  PaperCut Cloud Services:
Changed lines 60-61 from:
!!! Scan to Cloud Storage
The following port and URL endpoints must be externally available for a PaperCut server to upload files to the PaperCut Scan to Cloud Storage service. :
to:
!!! PaperCut Cloud Services
The following port and URL endpoints must be externally available for a PaperCut server to upload files to PaperCut Cloud Services. :
Deleted lines 62-68:
** [@https://scan.papercut.com/*@]
**[@https://storage.googleapis.com/pc-scan-us.appspot.com/*@]

!!! Integrated Scanning - OCR Cloud Service
The following port and URL endpoints must be externally available for a PaperCut server to upload files to the PaperCut OCR Cloud Service. :
*[@443@] TCP (HTTPS), with connection to:
** [@https://ocr.cloud.papercut.com/*@]
Changed lines 64-65 from:
to:
** [@https://scan.papercut.com/*@] (Scan to Cloud Storage)
** [@https://ocr.cloud.papercut.com/*@] (Integrated Scanning - OCR)
Added lines 70-71:
**[@https://storage.googleapis.com/*@]
October 18, 2018, at 10:25 AM by Matt Lee - Added OCR Service to required ports.
Added lines 65-69:

!!! Integrated Scanning - OCR Cloud Service
The following port and URL endpoints must be externally available for a PaperCut server to upload files to the PaperCut OCR Cloud Service. :
*[@443@] TCP (HTTPS), with connection to:
** [@https://ocr.cloud.papercut.com/*@]
September 24, 2018, at 04:03 PM by Aaron Pouliot - Added Scan to Cloud storage Google API URL to whitelist
Added line 64:
**[@https://storage.googleapis.com/pc-scan-us.appspot.com/*@]
May 15, 2018, at 04:34 AM by peterf - Fixing Ricoh firewall ports
Changed line 133 from:
!!!Ricoh
to:
!!!Ricoh SDK/J
Added lines 135-136:
**[@9191@] (if configured to use port 9193 and Integrated Scanning)
**[@9192@]
Added lines 138-143:
**[@51443@] (for setup with Remote Operation Client)

!!!Ricoh [=SmartSDK=]
*Inbound
**[@9192@]
**[@51443@] (for setup with Remote Operation Client)
May 14, 2018, at 10:51 PM by Aaron Pouliot - Added note on Scan to Cloud
Added lines 59-63:

!!! Scan to Cloud Storage
The following port and URL endpoints must be externally available for a PaperCut server to upload files to the PaperCut Scan to Cloud Storage service. :
*[@443@] TCP (HTTPS), with connection to:
** [@https://scan.papercut.com/*@]
Changed line 31 from:
The following ports must be available:
to:
The following ports must be available for internal communications:
Changed line 37 from:
The following port and URL endpoints must be available for auto updating:
to:
The following port and URL endpoints must be externally available for auto updating:
Changed line 55 from:
The following port and URL endpoints must be available for auto updating:
to:
The following port and URL endpoints must be externally available for auto updating:
May 03, 2018, at 05:56 PM by Brian - Adding ports and endpoints for the auto updates to mobility and job ticketing.. per ZD #791338
Added lines 37-41:
The following port and URL endpoints must be available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://mobility-print.papercut.com/*@]
** [@https://storage.googleapis.com/pc-mobility-print.appspot.com/*@]

Added lines 53-58:

!!! Job Ticketing
The following port and URL endpoints must be available for auto updating:
*[@443@] TCP (HTTPS), with connections to:
** [@https://pc-job-ticketing.appspot.com/*@]
** [@https://storage.googleapis.com/pc-job-ticketing.appspot.com/*@]
March 21, 2018, at 02:21 AM by jamesv - Fixed HP port number format
Changed line 85 from:
** 7627 (TCP/HTTPS)
to:
** [@7627@] (TCP/HTTPS)
March 21, 2018, at 02:18 AM by jamesv - Added port 80 for FXAIP
Added line 90:
**[@80@]
September 12, 2017, at 02:12 AM by peterf - Revised GCP section to reflect change of proxy requirement in 17.3
Changed lines 1-2 from:
(:title Firewall Configuration - Ports used by PaperCut :)
to:
(:title Firewall Configuration - Ports Used by PaperCut NG and PaperCut MF :)
Changed lines 38-39 from:
PaperCut needs to be able to communicate, without the use of a proxy, to the Google Cloud Print services. This is done on:
to:
PaperCut NG and PaperCut MF need to be able to communicate to the Google Cloud Print services. This is done on:
Added lines 46-47:

By default, this needs to be achievable without the use of a proxy, unless that proxy is "transparent" on TCP ports 80 and 443, and requires no authentication. If running version 17.3 or later of PaperCut NG or PaperCut MF, a proxy server which is not "transparent" may be able to be configured using the instructions found in the following section of the [[https://www.papercut.com/products/ng/manual/applicationserver/topics/mobile-google-cloud-print.html#aanchor794|User Manual]].
Changed line 156 from:
*Inbound
to:
*Outbound
Changed line 161 from:
*Inbound
to:
*Outbound
Changed line 166 from:
*Inbound
to:
*Outbound
April 25, 2017, at 03:50 AM by Mel Zouzoulas - Added Mobility Print ports
Added lines 29-35:

!!! Mobility Print
The following ports must be available:
*[@9163@] HTTP
*[@9164@] HTTPS
*[@53@] DNS
*[@5353@] mDNS
June 03, 2016, at 05:56 AM by Mel Zouzoulas - Added Brother firewall ports
Changed line 56 from:
*Inbound (Device connecting to PaperCut)
to:
*Inbound (device connecting to PaperCut)
Changed line 60 from:
*Inbound (Device connecting to PaperCut)
to:
*Inbound (device connecting to PaperCut)
June 03, 2016, at 05:53 AM by Mel Zouzoulas - Added Brother firewall ports
Deleted line 56:
June 03, 2016, at 05:52 AM by Mel Zouzoulas - Added Brother firewall ports
Added lines 54-58:

!!![=Brother=]
*Inbound (Device connecting to PaperCut)

**[@9191@] TCP/HTTP
May 06, 2016, at 05:19 AM by 203.222.91.204 -
Deleted lines 58-67:

!!![=Cartadis CopiCode-IP=]
*Inbound (Device connecting to PaperCut)
**[@5114@]
**[@9193@]

!!![=Cartadis cPad=]
*Inbound (Device connecting to PaperCut)
**[@9191@]
**[@9192@]
Added lines 81-83:
*Outbound connections from PaperCut to the HP devices on port:
** 7627 (TCP/HTTPS)

December 09, 2015, at 12:13 PM by 188.220.74.101 -
Added lines 54-58:

!!![=Canon=]
*Inbound (Device connecting to PaperCut)
**[@9191@]
**[@9193@]
Changed line 162 from:
[-keywords: port, TCP, fire wall, firewall rules -]
to:
[-keywords: port, TCP, fire wall, firewall rules, anti virus -]
Changed lines 122-123 from:
**[@9191@] TCP
to:
**[@9191@] TCP - for EWB
**[@9192@] TCP - secure messages for EWB
Changed lines 128-130 from:
**[@49629@] TCP (HTTP) for [=SDK2=] only
**
[@49630@] TCP (HTTPS) for [=RD30=] only
to:
**[@49629@] TCP (HTTP) for [=SDK2=] and [=RD30=] only
**[@49630@]
TCP (HTTPS) for [=SDK2=] and [=RD30=] only
January 14, 2015, at 11:22 PM by tim - mention LDAPS for Toshiba
Changed lines 123-124 from:
**[@10389@] TCP
to:
**[@10389@] TCP (LDAP)
**[@10636@] TCP (LDAPS)
Added lines 66-68:
*Outbound (PaperCut connecting to the device)
**[@443@]

Added lines 78-80:
*Outbound (PaperCut connecting to the device)
**[@443@]

December 16, 2014, at 11:14 PM by 203.222.91.204 -
Added lines 65-69:
!!!Dell (AIP)
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]

Added lines 74-78:
!!!Fuji-Xerox (AIP)
*Inbound (device connecting to PaperCut)
**[@9191@]
**[@9192@]

Changed lines 132-133 from:
!!!RFIDeas Lantronix
to:
!!![=RFIDeas=] Lantronix
Changed lines 137-138 from:
!!!RFIdeas Ethernet 241
to:
!!![=RFIdeas=] Ethernet 241
November 06, 2014, at 12:41 AM by Rick - added RFIdeas ports
Added lines 132-140:
!!!RFIDeas Lantronix

*Inbound
**[@10001@]

!!!RFIdeas Ethernet 241

*Inbound
**[@2000@]
November 06, 2014, at 12:04 AM by Rick - added Elatec port
Added lines 127-131:
!!!Elatec TWN3 Reader and TCP Converter

*Inbound
**[@7778@]

October 30, 2014, at 05:56 PM by Kyle - Added Outbound Port for Toshiba Eraser
Changed lines 112-113 from:
to:
**[@49630@] TCP (HTTPS) for [=RD30=] only
Changed lines 41-42 from:
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.
to:
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for `PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.

You may specify a custom port, the defaults are below
.
Added lines 40-49:
!!Database connections
PaperCut makes use of the [[http://jtds.sourceforge.net/faq.html#urlFormat|jTDS JDBC]] driver for Microsoft SQL server and SQL Server Express, the [[http://jdbc.postgresql.org/documentation/head/connect.html|postgresql JDBC]] driver for PostgreSQL, Oracle JDBC for Oracle and [[http://dev.mysql.com/doc/connector-j/en/connector-j-reference-configuration-properties.html|MySQL JDBC]] for MySQL.

* Oracle: [@1521@]
* Microsoft SQL Server: [@1433@]
* Microsoft SQL Server Express: [@1450@]
* `MySQL: [@3306@]
* `PostgreSQL: [@5432@]

Changed line 127 from:
[-keywords: port, TCP, fire wall, firewall rules -]
to:
[-keywords: port, TCP, fire wall, firewall rules -]
Changed line 26 from:
If using NetBIOS:
to:
If using `NetBIOS:
December 30, 2013, at 07:54 PM by Kyle - Adding ports 445 TCP SMB and 137-139 NetBIOS ports for Cross-Server Job Redirection
Added lines 22-29:
!!!Cross-Server Job Redirection
Windows Spooler service uses the following ports for redirecting print jobs between a Primary and Secondary server.
*[@445@] TCP, Server Message Block

If using NetBIOS:
*[@137/138@] UDP, Name and Datagram Services
*[@139@] TCP, Session Services

Changed lines 25-27 from:
* [@80@] TCP HTTP
* [@443@] TCP HTTPS

to:
* [@443@] TCP (HTTPS), with connections to:
** [@https://www.googleapis.com/*@]
** [@https://accounts.google.com/*@]
** [@https://www.google.com/cloudprint/*@]
* [@5222@] TCP (XMPP, using STARTTLS), with a persistent connection to:
** [@talk.google.com@]

Added lines 22-27:
!!! Google Cloud Print
PaperCut needs to be able to communicate, without the use of a proxy, to the Google Cloud Print services. This is done on:

* [@80@] TCP HTTP
* [@443@] TCP HTTPS

December 11, 2012, at 05:23 AM by Tim - add a port for Toshiba v2 - and point out others for v1 only
Changed line 78 from:
**[@162@] UDP (SNMP traps)
to:
**[@162@] UDP (SNMP traps) for [=SDK1=] only
Changed lines 80-81 from:
**[@161@] UDP (SNMP)
to:
**[@161@] UDP (SNMP) for [=SDK1=] only
**[@49629@] TCP (HTTP) for [=SDK2=] only

Changed lines 13-14 from:
([[http://www.xmlrpc.com/|XML-RPC]]).  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.
to:
([[http://www.xmlrpc.com/|XML-RPC]]). Sensitive data is sent over SSL/HTTPS on port 9192.  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.
Changed line 19 from:
*Outbound
to:
*Outbound (PaperCut connecting to the device)
Changed line 26 from:
*Inbound
to:
*Inbound (Device connecting to PaperCut)
Changed line 31 from:
*Inbound
to:
*Inbound (Device connecting to PaperCut)
Changed line 40 from:
*Outbound
to:
*Outbound (connecting to the device)
Changed line 43 from:
*Inbound
to:
*Inbound (device connecting to PaperCut)
Deleted line 98:
September 13, 2012, at 03:43 AM by Alec - Removed Mita
Changed line 47 from:
!!!Kyocera-Mita
to:
!!!Kyocera
Added line 49:
**[@9191@] (if using custom logos)
Added line 54:
**[@9191@] (if using custom logos)
Added line 63:
**[@9191@] (if using custom logos)
Deleted line 99:
May 21, 2012, at 06:51 AM by matt - added samsung and cpad
Changed line 25 from:
!!![=CopiCode-IP=]
to:
!!![=Cartadis CopiCode-IP=]
Changed line 30 from:
!!!HP
to:
!!![=Cartadis cPad=]
Added lines 32-36:
**[@9191@]
**[@9192@]

!!!HP
*Inbound
Added lines 59-62:
!!!Samsung
*Inbound
**[@9193@]

Deleted line 97:
Changed lines 81-82 from:
**[@91912@]
to:
**[@9192@]
Changed line 18 from:
!!!SNMP
to:
!!!SNMP (for toner level retrieval)
Changed lines 27-29 from:
**[@5114@] 
to:
**[@5114@]
**[@9193@]
Changed lines 31-32 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 36-37 from:
**[@50003@] 
to:
**[@50003@]
**[@80/443@]
*Inbound
**[@9191@]
**[@9192@]

Changed lines 43-44 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 47-48 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Changed lines 51-52 from:
Uses only the standard PaperCut ports.
to:
*Inbound
**[@9193@]

Deleted lines 57-58:

!!!Toshiba
Added lines 59-64:
**[@9191@]
**[@9192@]

!!!Toshiba
*Inbound
**[@9191@] TCP
Changed lines 79-82 from:
to:
*Inbound
**[@9191@]
**[@91912@]

Changed lines 12-13 from:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication ([[http://www.xmlrpc.com/|XML-RPC]]).
to:
A:  PaperCut uses standard HTTP XML `WebServices for client-server and server-server communication
([[http://www.xmlrpc.com/|XML-RPC]]).  The PaperCut installer on Windows and Mac will endeavor to make sure these ports are open.  Linux systems running firewalls may need to manual open these ports to local network IP addresses as appropriate.

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on August 20, 2019, at 02:31 AM
Printable View   |   Article History   |   Edit Article