GET https://kbin.spritesserver.nl/index.php/m/linux@lemmy.ml/t/33772/Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed/active

Response
200 OK
IP
216.73.216.122
Profiled on
Token
bffa4f

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 9.37 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.06 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2413
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
  +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
  +url: null
  +body: """
    Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
    \n
    - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
    - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
    - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
    \n
    If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
    \n
    Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
    \n
    Thank you in advance for any suggestions!\n
    \n
    EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
    \n
    - sudo vi /etc/firewalld/firewalld.conf\n
    - Set LogDenied=all\n
    - sudo firewall-cmd --reload\n
    \n
    To find lines related to my printer (known to be at 192.168.1.57):\n
    \n
    - dmseg | grep 192.168.1.57\n
    \n
    Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
    \n
    [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
    \n
    [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
    \n
    [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
    \n
    Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 22
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729454885 {#2418
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 33772
  -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
  -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706596384
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/11317523"
  +editedAt: DateTimeImmutable @1729423135 {#1858
    date: 2024-10-20 13:18:55.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706509984 {#2388
    date: 2024-01-29 07:33:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2413
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
  +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
  +url: null
  +body: """
    Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
    \n
    - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
    - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
    - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
    \n
    If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
    \n
    Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
    \n
    Thank you in advance for any suggestions!\n
    \n
    EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
    \n
    - sudo vi /etc/firewalld/firewalld.conf\n
    - Set LogDenied=all\n
    - sudo firewall-cmd --reload\n
    \n
    To find lines related to my printer (known to be at 192.168.1.57):\n
    \n
    - dmseg | grep 192.168.1.57\n
    \n
    Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
    \n
    [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
    \n
    [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
    \n
    [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
    \n
    Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 22
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729454885 {#2418
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 33772
  -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
  -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706596384
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/11317523"
  +editedAt: DateTimeImmutable @1729423135 {#1858
    date: 2024-10-20 13:18:55.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706509984 {#2388
    date: 2024-01-29 07:33:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2413
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
  +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
  +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
  +url: null
  +body: """
    Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
    \n
    - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
    - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
    - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
    \n
    If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
    \n
    Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
    \n
    Thank you in advance for any suggestions!\n
    \n
    EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
    \n
    - sudo vi /etc/firewalld/firewalld.conf\n
    - Set LogDenied=all\n
    - sudo firewall-cmd --reload\n
    \n
    To find lines related to my printer (known to be at 192.168.1.57):\n
    \n
    - dmseg | grep 192.168.1.57\n
    \n
    Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
    \n
    [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
    \n
    [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
    \n
    [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
    \n
    Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 22
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729454885 {#2418
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1408 …}
  +votes: Doctrine\ORM\PersistentCollection {#1961 …}
  +reports: Doctrine\ORM\PersistentCollection {#1972 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
  +badges: Doctrine\ORM\PersistentCollection {#2436 …}
  +children: []
  -id: 33772
  -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
  -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706596384
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/11317523"
  +editedAt: DateTimeImmutable @1729423135 {#1858
    date: 2024-10-20 13:18:55.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706509984 {#2388
    date: 2024-01-29 07:33:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4126
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729454885 {#4135
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4124 …}
  +nested: Doctrine\ORM\PersistentCollection {#4122 …}
  +votes: Doctrine\ORM\PersistentCollection {#4120 …}
  +reports: Doctrine\ORM\PersistentCollection {#4118 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
  -id: 349208
  -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6523389"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706514167 {#4071
    date: 2024-01-29 08:42:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4126
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729454885 {#4135
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4124 …}
  +nested: Doctrine\ORM\PersistentCollection {#4122 …}
  +votes: Doctrine\ORM\PersistentCollection {#4120 …}
  +reports: Doctrine\ORM\PersistentCollection {#4118 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
  -id: 349208
  -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6523389"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706514167 {#4071
    date: 2024-01-29 08:42:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4126
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729454885 {#4135
    date: 2024-10-20 22:08:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4124 …}
  +nested: Doctrine\ORM\PersistentCollection {#4122 …}
  +votes: Doctrine\ORM\PersistentCollection {#4120 …}
  +reports: Doctrine\ORM\PersistentCollection {#4118 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
  -id: 349208
  -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6523389"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706514167 {#4071
    date: 2024-01-29 08:42:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#4397
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4126
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729454885 {#4135
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4124 …}
    +nested: Doctrine\ORM\PersistentCollection {#4122 …}
    +votes: Doctrine\ORM\PersistentCollection {#4120 …}
    +reports: Doctrine\ORM\PersistentCollection {#4118 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
    -id: 349208
    -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6523389"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706514167 {#4071
      date: 2024-01-29 08:42:47.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706515918 {#4396
    date: 2024-01-29 09:11:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4400 …}
  +nested: Doctrine\ORM\PersistentCollection {#4405 …}
  +votes: Doctrine\ORM\PersistentCollection {#4401 …}
  +reports: Doctrine\ORM\PersistentCollection {#4407 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
  -id: 349244
  -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7120696"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706515918 {#4393
    date: 2024-01-29 09:11:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#4397
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4126
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729454885 {#4135
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4124 …}
    +nested: Doctrine\ORM\PersistentCollection {#4122 …}
    +votes: Doctrine\ORM\PersistentCollection {#4120 …}
    +reports: Doctrine\ORM\PersistentCollection {#4118 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
    -id: 349208
    -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6523389"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706514167 {#4071
      date: 2024-01-29 08:42:47.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706515918 {#4396
    date: 2024-01-29 09:11:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4400 …}
  +nested: Doctrine\ORM\PersistentCollection {#4405 …}
  +votes: Doctrine\ORM\PersistentCollection {#4401 …}
  +reports: Doctrine\ORM\PersistentCollection {#4407 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
  -id: 349244
  -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7120696"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706515918 {#4393
    date: 2024-01-29 09:11:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#4397
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4126
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729454885 {#4135
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4124 …}
    +nested: Doctrine\ORM\PersistentCollection {#4122 …}
    +votes: Doctrine\ORM\PersistentCollection {#4120 …}
    +reports: Doctrine\ORM\PersistentCollection {#4118 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
    -id: 349208
    -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6523389"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706514167 {#4071
      date: 2024-01-29 08:42:47.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706515918 {#4396
    date: 2024-01-29 09:11:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4400 …}
  +nested: Doctrine\ORM\PersistentCollection {#4405 …}
  +votes: Doctrine\ORM\PersistentCollection {#4401 …}
  +reports: Doctrine\ORM\PersistentCollection {#4407 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
  -id: 349244
  -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7120696"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706515918 {#4393
    date: 2024-01-29 09:11:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4397
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4126
      +user: App\Entity\User {#4074 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729454885 {#4135
        date: 2024-10-20 22:08:05.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4124 …}
      +nested: Doctrine\ORM\PersistentCollection {#4122 …}
      +votes: Doctrine\ORM\PersistentCollection {#4120 …}
      +reports: Doctrine\ORM\PersistentCollection {#4118 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
      -id: 349208
      -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.nl/comment/6523389"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706514167 {#4071
        date: 2024-01-29 08:42:47.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706515918 {#4396
      date: 2024-01-29 09:11:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4400 …}
    +nested: Doctrine\ORM\PersistentCollection {#4405 …}
    +votes: Doctrine\ORM\PersistentCollection {#4401 …}
    +reports: Doctrine\ORM\PersistentCollection {#4407 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
    -id: 349244
    -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7120696"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706515918 {#4393
      date: 2024-01-29 09:11:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    You may also need to allow multicast. Look into it a bit more.\n
    \n
    You can also enable debugging on the firewall and see what exactly gets blocked.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706532138 {#4434
    date: 2024-01-29 13:42:18.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4437 …}
  +nested: Doctrine\ORM\PersistentCollection {#4441 …}
  +votes: Doctrine\ORM\PersistentCollection {#4443 …}
  +reports: Doctrine\ORM\PersistentCollection {#4444 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
  -id: 349626
  -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6527866"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706532138 {#4431
    date: 2024-01-29 13:42:18.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4397
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4126
      +user: App\Entity\User {#4074 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729454885 {#4135
        date: 2024-10-20 22:08:05.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4124 …}
      +nested: Doctrine\ORM\PersistentCollection {#4122 …}
      +votes: Doctrine\ORM\PersistentCollection {#4120 …}
      +reports: Doctrine\ORM\PersistentCollection {#4118 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
      -id: 349208
      -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.nl/comment/6523389"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706514167 {#4071
        date: 2024-01-29 08:42:47.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706515918 {#4396
      date: 2024-01-29 09:11:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4400 …}
    +nested: Doctrine\ORM\PersistentCollection {#4405 …}
    +votes: Doctrine\ORM\PersistentCollection {#4401 …}
    +reports: Doctrine\ORM\PersistentCollection {#4407 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
    -id: 349244
    -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7120696"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706515918 {#4393
      date: 2024-01-29 09:11:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    You may also need to allow multicast. Look into it a bit more.\n
    \n
    You can also enable debugging on the firewall and see what exactly gets blocked.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706532138 {#4434
    date: 2024-01-29 13:42:18.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4437 …}
  +nested: Doctrine\ORM\PersistentCollection {#4441 …}
  +votes: Doctrine\ORM\PersistentCollection {#4443 …}
  +reports: Doctrine\ORM\PersistentCollection {#4444 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
  -id: 349626
  -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6527866"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706532138 {#4431
    date: 2024-01-29 13:42:18.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4074 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4397
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4126
      +user: App\Entity\User {#4074 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729454885 {#4135
        date: 2024-10-20 22:08:05.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4124 …}
      +nested: Doctrine\ORM\PersistentCollection {#4122 …}
      +votes: Doctrine\ORM\PersistentCollection {#4120 …}
      +reports: Doctrine\ORM\PersistentCollection {#4118 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
      -id: 349208
      -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.nl/comment/6523389"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706514167 {#4071
        date: 2024-01-29 08:42:47.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706515918 {#4396
      date: 2024-01-29 09:11:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4400 …}
    +nested: Doctrine\ORM\PersistentCollection {#4405 …}
    +votes: Doctrine\ORM\PersistentCollection {#4401 …}
    +reports: Doctrine\ORM\PersistentCollection {#4407 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
    -id: 349244
    -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7120696"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706515918 {#4393
      date: 2024-01-29 09:11:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    You may also need to allow multicast. Look into it a bit more.\n
    \n
    You can also enable debugging on the firewall and see what exactly gets blocked.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706532138 {#4434
    date: 2024-01-29 13:42:18.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4437 …}
  +nested: Doctrine\ORM\PersistentCollection {#4441 …}
  +votes: Doctrine\ORM\PersistentCollection {#4443 …}
  +reports: Doctrine\ORM\PersistentCollection {#4444 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
  -id: 349626
  -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/6527866"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706532138 {#4431
    date: 2024-01-29 13:42:18.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4489
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4429
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4397
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4126
        +user: App\Entity\User {#4074 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729454885 {#4135
          date: 2024-10-20 22:08:05.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4124 …}
        +nested: Doctrine\ORM\PersistentCollection {#4122 …}
        +votes: Doctrine\ORM\PersistentCollection {#4120 …}
        +reports: Doctrine\ORM\PersistentCollection {#4118 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
        -id: 349208
        -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.nl/comment/6523389"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706514167 {#4071
          date: 2024-01-29 08:42:47.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4126}
      +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1706515918 {#4396
        date: 2024-01-29 09:11:58.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@lemmyvore@feddit.nl"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4400 …}
      +nested: Doctrine\ORM\PersistentCollection {#4405 …}
      +votes: Doctrine\ORM\PersistentCollection {#4401 …}
      +reports: Doctrine\ORM\PersistentCollection {#4407 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
      -id: 349244
      -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7120696"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706515918 {#4393
        date: 2024-01-29 09:11:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: """
      You may also need to allow multicast. Look into it a bit more.\n
      \n
      You can also enable debugging on the firewall and see what exactly gets blocked.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706532138 {#4434
      date: 2024-01-29 13:42:18.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4437 …}
    +nested: Doctrine\ORM\PersistentCollection {#4441 …}
    +votes: Doctrine\ORM\PersistentCollection {#4443 …}
    +reports: Doctrine\ORM\PersistentCollection {#4444 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
    -id: 349626
    -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6527866"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706532138 {#4431
      date: 2024-01-29 13:42:18.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    Added some info to the post. Firewall is blocking 3289 UDP from my printer, so I added 3289 UDP to open ports for “home”, “public”, and “internal” zones. However, I’m still seeing filter_IN_public_REJECT entries in dmesg, so it seems the firewall is still blocking these. Is there a different way I should be telling it to allow requests on this port?\n
    \n
    Firewall also allows mdns service (again, in “home”, “public”, and “internal” zones), but I also see entries like this:\n
    \n
    [41951.119486] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=10725 DF PROTO=2 MARK=0x3214\n
    \n
    It sounds like 224.0.0.1 is related to mdns broadcasts, so it seems firewall is also still blocking these (despite mdns being allowed service).\n
    \n
    Am I specifying these in the wrong place? (Per Connections - System Settings, my wifi is in Firewall zone “home”).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706558333 {#4487
    date: 2024-01-29 20:58:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4490 …}
  +nested: Doctrine\ORM\PersistentCollection {#4492 …}
  +votes: Doctrine\ORM\PersistentCollection {#4494 …}
  +reports: Doctrine\ORM\PersistentCollection {#4496 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4498 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4500 …}
  -id: 350728
  -bodyTs: "'0x00':101,103 '0x3214':112 '1':105 '10725':107 '192.168.1.1':95 '2':110 '224.0.0.1':97,116 '3289':10,18 '36':99 '41951.119486':85 'ad':1,17 'allow':61,68,134 'also':67,80,127 'block':9,48,129 'broadcast':121 'connect':145 'despit':131 'df':108 'differ':53 'dmesg':40 'dst':96 'entri':38,82 'filter':34,86 'firewal':7,45,66,125,152 'home':24,73,154 'howev':29 'id':106 'info':3 'intern':27,76 'len':98 'like':83,115 'm':31 'mac':93 'mark':111 'mdns':69,120,132 'open':21 'per':144 'place':143 'port':22,65 'post':6 'prec':102 'printer':14 'proto':109 'public':25,36,74,88 'reject':37,89 'relat':118 'request':62 'see':33,81 'seem':43,124 'servic':70,135 'set':147 'sound':114 'specifi':138 'src':94 'still':32,47,128 'system':146 'tell':58 'tos':100 'ttl':104 'udp':11,19 'way':54 'wifi':149 'wlp0s20f0u3':91 'wrong':142 'zone':28,77,153"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7132504"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706558333 {#4488
    date: 2024-01-29 20:58:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4489
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4429
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4397
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4126
        +user: App\Entity\User {#4074 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729454885 {#4135
          date: 2024-10-20 22:08:05.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4124 …}
        +nested: Doctrine\ORM\PersistentCollection {#4122 …}
        +votes: Doctrine\ORM\PersistentCollection {#4120 …}
        +reports: Doctrine\ORM\PersistentCollection {#4118 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
        -id: 349208
        -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.nl/comment/6523389"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706514167 {#4071
          date: 2024-01-29 08:42:47.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4126}
      +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1706515918 {#4396
        date: 2024-01-29 09:11:58.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@lemmyvore@feddit.nl"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4400 …}
      +nested: Doctrine\ORM\PersistentCollection {#4405 …}
      +votes: Doctrine\ORM\PersistentCollection {#4401 …}
      +reports: Doctrine\ORM\PersistentCollection {#4407 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
      -id: 349244
      -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7120696"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706515918 {#4393
        date: 2024-01-29 09:11:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: """
      You may also need to allow multicast. Look into it a bit more.\n
      \n
      You can also enable debugging on the firewall and see what exactly gets blocked.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706532138 {#4434
      date: 2024-01-29 13:42:18.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4437 …}
    +nested: Doctrine\ORM\PersistentCollection {#4441 …}
    +votes: Doctrine\ORM\PersistentCollection {#4443 …}
    +reports: Doctrine\ORM\PersistentCollection {#4444 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
    -id: 349626
    -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6527866"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706532138 {#4431
      date: 2024-01-29 13:42:18.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    Added some info to the post. Firewall is blocking 3289 UDP from my printer, so I added 3289 UDP to open ports for “home”, “public”, and “internal” zones. However, I’m still seeing filter_IN_public_REJECT entries in dmesg, so it seems the firewall is still blocking these. Is there a different way I should be telling it to allow requests on this port?\n
    \n
    Firewall also allows mdns service (again, in “home”, “public”, and “internal” zones), but I also see entries like this:\n
    \n
    [41951.119486] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=10725 DF PROTO=2 MARK=0x3214\n
    \n
    It sounds like 224.0.0.1 is related to mdns broadcasts, so it seems firewall is also still blocking these (despite mdns being allowed service).\n
    \n
    Am I specifying these in the wrong place? (Per Connections - System Settings, my wifi is in Firewall zone “home”).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706558333 {#4487
    date: 2024-01-29 20:58:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4490 …}
  +nested: Doctrine\ORM\PersistentCollection {#4492 …}
  +votes: Doctrine\ORM\PersistentCollection {#4494 …}
  +reports: Doctrine\ORM\PersistentCollection {#4496 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4498 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4500 …}
  -id: 350728
  -bodyTs: "'0x00':101,103 '0x3214':112 '1':105 '10725':107 '192.168.1.1':95 '2':110 '224.0.0.1':97,116 '3289':10,18 '36':99 '41951.119486':85 'ad':1,17 'allow':61,68,134 'also':67,80,127 'block':9,48,129 'broadcast':121 'connect':145 'despit':131 'df':108 'differ':53 'dmesg':40 'dst':96 'entri':38,82 'filter':34,86 'firewal':7,45,66,125,152 'home':24,73,154 'howev':29 'id':106 'info':3 'intern':27,76 'len':98 'like':83,115 'm':31 'mac':93 'mark':111 'mdns':69,120,132 'open':21 'per':144 'place':143 'port':22,65 'post':6 'prec':102 'printer':14 'proto':109 'public':25,36,74,88 'reject':37,89 'relat':118 'request':62 'see':33,81 'seem':43,124 'servic':70,135 'set':147 'sound':114 'specifi':138 'src':94 'still':32,47,128 'system':146 'tell':58 'tos':100 'ttl':104 'udp':11,19 'way':54 'wifi':149 'wlp0s20f0u3':91 'wrong':142 'zone':28,77,153"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7132504"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706558333 {#4488
    date: 2024-01-29 20:58:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4489
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4429
    +user: App\Entity\User {#4074 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4397
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4126
        +user: App\Entity\User {#4074 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Are you using Avahi for the auto discovery? If so you need to open port 5353 UDP."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729454885 {#4135
          date: 2024-10-20 22:08:05.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4124 …}
        +nested: Doctrine\ORM\PersistentCollection {#4122 …}
        +votes: Doctrine\ORM\PersistentCollection {#4120 …}
        +reports: Doctrine\ORM\PersistentCollection {#4118 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4086 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4090 …}
        -id: 349208
        -bodyTs: "'5353':16 'auto':7 'avahi':4 'discoveri':8 'need':12 'open':14 'port':15 'udp':17 'use':3"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.nl/comment/6523389"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706514167 {#4071
          date: 2024-01-29 08:42:47.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4126}
      +body: "No change with allowing 5353 UDP through the firewall, unfortunately. But thank you for the suggestion!"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1706515918 {#4396
        date: 2024-01-29 09:11:58.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@lemmyvore@feddit.nl"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4400 …}
      +nested: Doctrine\ORM\PersistentCollection {#4405 …}
      +votes: Doctrine\ORM\PersistentCollection {#4401 …}
      +reports: Doctrine\ORM\PersistentCollection {#4407 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4409 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4411 …}
      -id: 349244
      -bodyTs: "'5353':5 'allow':4 'chang':2 'firewal':9 'suggest':16 'thank':12 'udp':6 'unfortun':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7120696"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706515918 {#4393
        date: 2024-01-29 09:11:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4126}
    +body: """
      You may also need to allow multicast. Look into it a bit more.\n
      \n
      You can also enable debugging on the firewall and see what exactly gets blocked.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706532138 {#4434
      date: 2024-01-29 13:42:18.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@lemmyvore@feddit.nl"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4437 …}
    +nested: Doctrine\ORM\PersistentCollection {#4441 …}
    +votes: Doctrine\ORM\PersistentCollection {#4443 …}
    +reports: Doctrine\ORM\PersistentCollection {#4444 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4446 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4448 …}
    -id: 349626
    -bodyTs: "'allow':6 'also':3,16 'bit':12 'block':27 'debug':18 'enabl':17 'exact':25 'firewal':21 'get':26 'look':8 'may':2 'multicast':7 'need':4 'see':23"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/6527866"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706532138 {#4431
      date: 2024-01-29 13:42:18.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4126}
  +body: """
    Added some info to the post. Firewall is blocking 3289 UDP from my printer, so I added 3289 UDP to open ports for “home”, “public”, and “internal” zones. However, I’m still seeing filter_IN_public_REJECT entries in dmesg, so it seems the firewall is still blocking these. Is there a different way I should be telling it to allow requests on this port?\n
    \n
    Firewall also allows mdns service (again, in “home”, “public”, and “internal” zones), but I also see entries like this:\n
    \n
    [41951.119486] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=10725 DF PROTO=2 MARK=0x3214\n
    \n
    It sounds like 224.0.0.1 is related to mdns broadcasts, so it seems firewall is also still blocking these (despite mdns being allowed service).\n
    \n
    Am I specifying these in the wrong place? (Per Connections - System Settings, my wifi is in Firewall zone “home”).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706558333 {#4487
    date: 2024-01-29 20:58:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4490 …}
  +nested: Doctrine\ORM\PersistentCollection {#4492 …}
  +votes: Doctrine\ORM\PersistentCollection {#4494 …}
  +reports: Doctrine\ORM\PersistentCollection {#4496 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4498 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4500 …}
  -id: 350728
  -bodyTs: "'0x00':101,103 '0x3214':112 '1':105 '10725':107 '192.168.1.1':95 '2':110 '224.0.0.1':97,116 '3289':10,18 '36':99 '41951.119486':85 'ad':1,17 'allow':61,68,134 'also':67,80,127 'block':9,48,129 'broadcast':121 'connect':145 'despit':131 'df':108 'differ':53 'dmesg':40 'dst':96 'entri':38,82 'filter':34,86 'firewal':7,45,66,125,152 'home':24,73,154 'howev':29 'id':106 'info':3 'intern':27,76 'len':98 'like':83,115 'm':31 'mac':93 'mark':111 'mdns':69,120,132 'open':21 'per':144 'place':143 'port':22,65 'post':6 'prec':102 'printer':14 'proto':109 'public':25,36,74,88 'reject':37,89 'relat':118 'request':62 'see':33,81 'seem':43,124 'servic':70,135 'set':147 'sound':114 'specifi':138 'src':94 'still':32,47,128 'system':146 'tell':58 'tos':100 'ttl':104 'udp':11,19 'way':54 'wifi':149 'wlp0s20f0u3':91 'wrong':142 'zone':28,77,153"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7132504"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706558333 {#4488
    date: 2024-01-29 20:58:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#4158
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Is mdns allowed?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729418540 {#4164
    date: 2024-10-20 12:02:20.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4162 …}
  +votes: Doctrine\ORM\PersistentCollection {#4153 …}
  +reports: Doctrine\ORM\PersistentCollection {#4156 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
  -id: 349273
  -bodyTs: "'allow':3 'mdns':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706517277 {#4169
    date: 2024-01-29 09:34:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#4158
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Is mdns allowed?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729418540 {#4164
    date: 2024-10-20 12:02:20.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4162 …}
  +votes: Doctrine\ORM\PersistentCollection {#4153 …}
  +reports: Doctrine\ORM\PersistentCollection {#4156 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
  -id: 349273
  -bodyTs: "'allow':3 'mdns':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706517277 {#4169
    date: 2024-01-29 09:34:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#4158
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Is mdns allowed?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1729418540 {#4164
    date: 2024-10-20 12:02:20.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4162 …}
  +votes: Doctrine\ORM\PersistentCollection {#4153 …}
  +reports: Doctrine\ORM\PersistentCollection {#4156 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
  -id: 349273
  -bodyTs: "'allow':3 'mdns':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706517277 {#4169
    date: 2024-01-29 09:34:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#4415
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4158
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Is mdns allowed?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729418540 {#4164
      date: 2024-10-20 12:02:20.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4162 …}
    +votes: Doctrine\ORM\PersistentCollection {#4153 …}
    +reports: Doctrine\ORM\PersistentCollection {#4156 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
    -id: 349273
    -bodyTs: "'allow':3 'mdns':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706517277 {#4169
      date: 2024-01-29 09:34:37.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518075 {#4413
    date: 2024-01-29 09:47:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4416 …}
  +nested: Doctrine\ORM\PersistentCollection {#4418 …}
  +votes: Doctrine\ORM\PersistentCollection {#4420 …}
  +reports: Doctrine\ORM\PersistentCollection {#4422 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
  -id: 349291
  -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7121172"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518075 {#4414
    date: 2024-01-29 09:47:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#4415
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4158
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Is mdns allowed?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729418540 {#4164
      date: 2024-10-20 12:02:20.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4162 …}
    +votes: Doctrine\ORM\PersistentCollection {#4153 …}
    +reports: Doctrine\ORM\PersistentCollection {#4156 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
    -id: 349273
    -bodyTs: "'allow':3 'mdns':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706517277 {#4169
      date: 2024-01-29 09:34:37.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518075 {#4413
    date: 2024-01-29 09:47:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4416 …}
  +nested: Doctrine\ORM\PersistentCollection {#4418 …}
  +votes: Doctrine\ORM\PersistentCollection {#4420 …}
  +reports: Doctrine\ORM\PersistentCollection {#4422 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
  -id: 349291
  -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7121172"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518075 {#4414
    date: 2024-01-29 09:47:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#4415
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4158
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Is mdns allowed?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1729418540 {#4164
      date: 2024-10-20 12:02:20.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4162 …}
    +votes: Doctrine\ORM\PersistentCollection {#4153 …}
    +reports: Doctrine\ORM\PersistentCollection {#4156 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
    -id: 349273
    -bodyTs: "'allow':3 'mdns':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706517277 {#4169
      date: 2024-01-29 09:34:37.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518075 {#4413
    date: 2024-01-29 09:47:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4416 …}
  +nested: Doctrine\ORM\PersistentCollection {#4418 …}
  +votes: Doctrine\ORM\PersistentCollection {#4420 …}
  +reports: Doctrine\ORM\PersistentCollection {#4422 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
  -id: 349291
  -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7121172"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518075 {#4414
    date: 2024-01-29 09:47:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#4452
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4415
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4158
      +user: App\Entity\User {#4147 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Is mdns allowed?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729418540 {#4164
        date: 2024-10-20 12:02:20.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4162 …}
      +votes: Doctrine\ORM\PersistentCollection {#4153 …}
      +reports: Doctrine\ORM\PersistentCollection {#4156 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
      -id: 349273
      -bodyTs: "'allow':3 'mdns':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7844217"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706517277 {#4169
        date: 2024-01-29 09:34:37.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1706518075 {#4413
      date: 2024-01-29 09:47:55.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4416 …}
    +nested: Doctrine\ORM\PersistentCollection {#4418 …}
    +votes: Doctrine\ORM\PersistentCollection {#4420 …}
    +reports: Doctrine\ORM\PersistentCollection {#4422 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
    -id: 349291
    -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7121172"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706518075 {#4414
      date: 2024-01-29 09:47:55.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706519135 {#4450
    date: 2024-01-29 10:05:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4453 …}
  +nested: Doctrine\ORM\PersistentCollection {#4455 …}
  +votes: Doctrine\ORM\PersistentCollection {#4457 …}
  +reports: Doctrine\ORM\PersistentCollection {#4459 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
  -id: 349312
  -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844633"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706519135 {#4451
    date: 2024-01-29 10:05:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#4452
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4415
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4158
      +user: App\Entity\User {#4147 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Is mdns allowed?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729418540 {#4164
        date: 2024-10-20 12:02:20.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4162 …}
      +votes: Doctrine\ORM\PersistentCollection {#4153 …}
      +reports: Doctrine\ORM\PersistentCollection {#4156 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
      -id: 349273
      -bodyTs: "'allow':3 'mdns':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7844217"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706517277 {#4169
        date: 2024-01-29 09:34:37.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1706518075 {#4413
      date: 2024-01-29 09:47:55.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4416 …}
    +nested: Doctrine\ORM\PersistentCollection {#4418 …}
    +votes: Doctrine\ORM\PersistentCollection {#4420 …}
    +reports: Doctrine\ORM\PersistentCollection {#4422 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
    -id: 349291
    -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7121172"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706518075 {#4414
      date: 2024-01-29 09:47:55.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706519135 {#4450
    date: 2024-01-29 10:05:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4453 …}
  +nested: Doctrine\ORM\PersistentCollection {#4455 …}
  +votes: Doctrine\ORM\PersistentCollection {#4457 …}
  +reports: Doctrine\ORM\PersistentCollection {#4459 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
  -id: 349312
  -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844633"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706519135 {#4451
    date: 2024-01-29 10:05:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#4452
  +user: App\Entity\User {#4147 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4415
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4158
      +user: App\Entity\User {#4147 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Is mdns allowed?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1729418540 {#4164
        date: 2024-10-20 12:02:20.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4162 …}
      +votes: Doctrine\ORM\PersistentCollection {#4153 …}
      +reports: Doctrine\ORM\PersistentCollection {#4156 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
      -id: 349273
      -bodyTs: "'allow':3 'mdns':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ml/comment/7844217"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706517277 {#4169
        date: 2024-01-29 09:34:37.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1706518075 {#4413
      date: 2024-01-29 09:47:55.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4416 …}
    +nested: Doctrine\ORM\PersistentCollection {#4418 …}
    +votes: Doctrine\ORM\PersistentCollection {#4420 …}
    +reports: Doctrine\ORM\PersistentCollection {#4422 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
    -id: 349291
    -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7121172"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706518075 {#4414
      date: 2024-01-29 09:47:55.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706519135 {#4450
    date: 2024-01-29 10:05:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4453 …}
  +nested: Doctrine\ORM\PersistentCollection {#4455 …}
  +votes: Doctrine\ORM\PersistentCollection {#4457 …}
  +reports: Doctrine\ORM\PersistentCollection {#4459 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
  -id: 349312
  -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7844633"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706519135 {#4451
    date: 2024-01-29 10:05:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\EntryComment {#4466
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4452
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4415
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4158
        +user: App\Entity\User {#4147 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Is mdns allowed?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729418540 {#4164
          date: 2024-10-20 12:02:20.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4163 …}
        +nested: Doctrine\ORM\PersistentCollection {#4162 …}
        +votes: Doctrine\ORM\PersistentCollection {#4153 …}
        +reports: Doctrine\ORM\PersistentCollection {#4156 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
        -id: 349273
        -bodyTs: "'allow':3 'mdns':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.ml/comment/7844217"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706517277 {#4169
          date: 2024-01-29 09:34:37.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4158}
      +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1706518075 {#4413
        date: 2024-01-29 09:47:55.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@MyNameIsRichard@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4416 …}
      +nested: Doctrine\ORM\PersistentCollection {#4418 …}
      +votes: Doctrine\ORM\PersistentCollection {#4420 …}
      +reports: Doctrine\ORM\PersistentCollection {#4422 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
      -id: 349291
      -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7121172"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706518075 {#4414
        date: 2024-01-29 09:47:55.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706519135 {#4450
      date: 2024-01-29 10:05:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4453 …}
    +nested: Doctrine\ORM\PersistentCollection {#4455 …}
    +votes: Doctrine\ORM\PersistentCollection {#4457 …}
    +reports: Doctrine\ORM\PersistentCollection {#4459 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
    -id: 349312
    -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844633"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706519135 {#4451
      date: 2024-01-29 10:05:35.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Yes, “sane” service is already in the “Allowed” list."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706546474 {#4471
    date: 2024-01-29 17:41:14.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4474 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4481 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4483 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4485 …}
  -id: 350214
  -bodyTs: "'allow':8 'alreadi':5 'list':9 'sane':2 'servic':3 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128811"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546474 {#4468
    date: 2024-01-29 17:41:14.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\EntryComment {#4466
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4452
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4415
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4158
        +user: App\Entity\User {#4147 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Is mdns allowed?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729418540 {#4164
          date: 2024-10-20 12:02:20.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4163 …}
        +nested: Doctrine\ORM\PersistentCollection {#4162 …}
        +votes: Doctrine\ORM\PersistentCollection {#4153 …}
        +reports: Doctrine\ORM\PersistentCollection {#4156 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
        -id: 349273
        -bodyTs: "'allow':3 'mdns':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.ml/comment/7844217"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706517277 {#4169
          date: 2024-01-29 09:34:37.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4158}
      +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1706518075 {#4413
        date: 2024-01-29 09:47:55.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@MyNameIsRichard@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4416 …}
      +nested: Doctrine\ORM\PersistentCollection {#4418 …}
      +votes: Doctrine\ORM\PersistentCollection {#4420 …}
      +reports: Doctrine\ORM\PersistentCollection {#4422 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
      -id: 349291
      -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7121172"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706518075 {#4414
        date: 2024-01-29 09:47:55.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706519135 {#4450
      date: 2024-01-29 10:05:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4453 …}
    +nested: Doctrine\ORM\PersistentCollection {#4455 …}
    +votes: Doctrine\ORM\PersistentCollection {#4457 …}
    +reports: Doctrine\ORM\PersistentCollection {#4459 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
    -id: 349312
    -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844633"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706519135 {#4451
      date: 2024-01-29 10:05:35.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Yes, “sane” service is already in the “Allowed” list."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706546474 {#4471
    date: 2024-01-29 17:41:14.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4474 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4481 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4483 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4485 …}
  -id: 350214
  -bodyTs: "'allow':8 'alreadi':5 'list':9 'sane':2 'servic':3 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128811"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546474 {#4468
    date: 2024-01-29 17:41:14.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\EntryComment {#4466
  +user: Proxies\__CG__\App\Entity\User {#1973 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4452
    +user: App\Entity\User {#4147 …}
    +entry: App\Entity\Entry {#2413}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4415
      +user: Proxies\__CG__\App\Entity\User {#1973 …}
      +entry: App\Entity\Entry {#2413}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4158
        +user: App\Entity\User {#4147 …}
        +entry: App\Entity\Entry {#2413}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: "Is mdns allowed?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1729418540 {#4164
          date: 2024-10-20 12:02:20.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@iggames@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4163 …}
        +nested: Doctrine\ORM\PersistentCollection {#4162 …}
        +votes: Doctrine\ORM\PersistentCollection {#4153 …}
        +reports: Doctrine\ORM\PersistentCollection {#4156 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4151 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4149 …}
        -id: 349273
        -bodyTs: "'allow':3 'mdns':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.ml/comment/7844217"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706517277 {#4169
          date: 2024-01-29 09:34:37.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4158}
      +body: "Added “mdns” service to allowed list for public zone, still get the SANE error. (Previously added 5353 UDP per another suggestion – sounds like this is the port for mDNS)"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1706518075 {#4413
        date: 2024-01-29 09:47:55.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@iggames@lemmy.world"
        "@MyNameIsRichard@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4416 …}
      +nested: Doctrine\ORM\PersistentCollection {#4418 …}
      +votes: Doctrine\ORM\PersistentCollection {#4420 …}
      +reports: Doctrine\ORM\PersistentCollection {#4422 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4424 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4426 …}
      -id: 349291
      -bodyTs: "'5353':17 'ad':1,16 'allow':5 'anoth':20 'error':14 'get':11 'like':23 'list':6 'mdns':2,29 'per':19 'port':27 'previous':15 'public':8 'sane':13 'servic':3 'sound':22 'still':10 'suggest':21 'udp':18 'zone':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/7121172"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706518075 {#4414
        date: 2024-01-29 09:47:55.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4158}
    +body: "A quick scan through the services in Yast firewall revealed that there is a sane service too. Is that enabled?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1706519135 {#4450
      date: 2024-01-29 10:05:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@iggames@lemmy.world"
      "@MyNameIsRichard@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4453 …}
    +nested: Doctrine\ORM\PersistentCollection {#4455 …}
    +votes: Doctrine\ORM\PersistentCollection {#4457 …}
    +reports: Doctrine\ORM\PersistentCollection {#4459 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4461 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4463 …}
    -id: 349312
    -bodyTs: "'enabl':20 'firewal':9 'quick':2 'reveal':10 'sane':15 'scan':3 'servic':6,16 'yast':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7844633"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706519135 {#4451
      date: 2024-01-29 10:05:35.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4158}
  +body: "Yes, “sane” service is already in the “Allowed” list."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706546474 {#4471
    date: 2024-01-29 17:41:14.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
    "@MyNameIsRichard@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4474 …}
  +nested: Doctrine\ORM\PersistentCollection {#4478 …}
  +votes: Doctrine\ORM\PersistentCollection {#4480 …}
  +reports: Doctrine\ORM\PersistentCollection {#4481 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4483 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4485 …}
  -id: 350214
  -bodyTs: "'allow':8 'alreadi':5 'list':9 'sane':2 'servic':3 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128811"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546474 {#4468
    date: 2024-01-29 17:41:14.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED moderate 
App\Entity\EntryComment {#4244
  +user: App\Entity\User {#4257 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Surely your firewall has an audit log for denied traffic.\n
    \n
    Or, turn off the firewall and run Wireshark while you print something.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706530389 {#4239
    date: 2024-01-29 13:13:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4245 …}
  +nested: Doctrine\ORM\PersistentCollection {#4247 …}
  +votes: Doctrine\ORM\PersistentCollection {#4249 …}
  +reports: Doctrine\ORM\PersistentCollection {#4251 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4253 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4255 …}
  -id: 349577
  -bodyTs: "'audit':6 'deni':9 'firewal':3,15 'log':7 'print':21 'run':17 'someth':22 'sure':1 'traffic':10 'turn':12 'wireshark':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6947612"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706530389 {#4240
    date: 2024-01-29 13:13:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
39 DENIED edit 
App\Entity\EntryComment {#4244
  +user: App\Entity\User {#4257 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Surely your firewall has an audit log for denied traffic.\n
    \n
    Or, turn off the firewall and run Wireshark while you print something.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706530389 {#4239
    date: 2024-01-29 13:13:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4245 …}
  +nested: Doctrine\ORM\PersistentCollection {#4247 …}
  +votes: Doctrine\ORM\PersistentCollection {#4249 …}
  +reports: Doctrine\ORM\PersistentCollection {#4251 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4253 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4255 …}
  -id: 349577
  -bodyTs: "'audit':6 'deni':9 'firewal':3,15 'log':7 'print':21 'run':17 'someth':22 'sure':1 'traffic':10 'turn':12 'wireshark':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6947612"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706530389 {#4240
    date: 2024-01-29 13:13:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
40 DENIED moderate 
App\Entity\EntryComment {#4244
  +user: App\Entity\User {#4257 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Surely your firewall has an audit log for denied traffic.\n
    \n
    Or, turn off the firewall and run Wireshark while you print something.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706530389 {#4239
    date: 2024-01-29 13:13:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4245 …}
  +nested: Doctrine\ORM\PersistentCollection {#4247 …}
  +votes: Doctrine\ORM\PersistentCollection {#4249 …}
  +reports: Doctrine\ORM\PersistentCollection {#4251 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4253 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4255 …}
  -id: 349577
  -bodyTs: "'audit':6 'deni':9 'firewal':3,15 'log':7 'print':21 'run':17 'someth':22 'sure':1 'traffic':10 'turn':12 'wireshark':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6947612"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706530389 {#4240
    date: 2024-01-29 13:13:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
42 DENIED moderate 
App\Entity\EntryComment {#4317
  +user: App\Entity\User {#4330 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "As I understand this article ( [linuxconfig.org/how-to-monitor-network-activity-o…](https://linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system) ), you can disable firewall and run “sudo netstat -tulpen” to get a list of all connections and find which ports need to be forwarded."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518256 {#4312
    date: 2024-01-29 09:50:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4318 …}
  +nested: Doctrine\ORM\PersistentCollection {#4320 …}
  +votes: Doctrine\ORM\PersistentCollection {#4322 …}
  +reports: Doctrine\ORM\PersistentCollection {#4324 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4328 …}
  -id: 349295
  -bodyTs: "'/how-to-monitor-network-activity-o':8 '/how-to-monitor-network-activity-on-a-linux-system)':11 'articl':5 'connect':27 'disabl':14 'find':29 'firewal':15 'forward':35 'get':22 'linuxconfig.org':7,10 'linuxconfig.org/how-to-monitor-network-activity-o':6 'linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system)':9 'list':24 'need':32 'netstat':19 'port':31 'run':17 'sudo':18 'tulpen':20 'understand':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8783076"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518256 {#4313
    date: 2024-01-29 09:50:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
43 DENIED edit 
App\Entity\EntryComment {#4317
  +user: App\Entity\User {#4330 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "As I understand this article ( [linuxconfig.org/how-to-monitor-network-activity-o…](https://linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system) ), you can disable firewall and run “sudo netstat -tulpen” to get a list of all connections and find which ports need to be forwarded."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518256 {#4312
    date: 2024-01-29 09:50:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4318 …}
  +nested: Doctrine\ORM\PersistentCollection {#4320 …}
  +votes: Doctrine\ORM\PersistentCollection {#4322 …}
  +reports: Doctrine\ORM\PersistentCollection {#4324 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4328 …}
  -id: 349295
  -bodyTs: "'/how-to-monitor-network-activity-o':8 '/how-to-monitor-network-activity-on-a-linux-system)':11 'articl':5 'connect':27 'disabl':14 'find':29 'firewal':15 'forward':35 'get':22 'linuxconfig.org':7,10 'linuxconfig.org/how-to-monitor-network-activity-o':6 'linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system)':9 'list':24 'need':32 'netstat':19 'port':31 'run':17 'sudo':18 'tulpen':20 'understand':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8783076"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518256 {#4313
    date: 2024-01-29 09:50:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
44 DENIED moderate 
App\Entity\EntryComment {#4317
  +user: App\Entity\User {#4330 …}
  +entry: App\Entity\Entry {#2413
    +user: Proxies\__CG__\App\Entity\User {#1973 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1899 …}
    +slug: "Firewall-preventing-Printing-Scanning-on-OpenSUSE-Tumbleweed"
    +title: "Firewall preventing Printing/Scanning on OpenSUSE Tumbleweed"
    +url: null
    +body: """
      Hello, I’m trying to use my Epson XP-200 printer/scanner with OpenSUSE Tumblweed.\n
      \n
      - /etc/sane.d/dll.conf has the “epson2” line uncommented.\n
      - /etc/sane.d/epson2.conf has “net autodiscovery” as its last line\n
      - My user is part of the “lp” group, which seems to be required for finding printers/scanners\n
      \n
      If I disable the firewall completely (using YaST2 firewall program), it works – the Skanlite software detects my scanner and connects to it. With the firewall enabled, however, Skanlite says SANE cannot find any scanners. I have tried allowing TCP and UDP ports 8610, 8612 (based on suggestions from [wiki.debian.org/SaneOverNetwork](https://wiki.debian.org/SaneOverNetwork)), and 631 (for CUPS) in the “public” zone, and added the “sane” service to “Allowed” services (didn’t see a “cups” service option), but Skanlite still says SANE cannot find the scanner.\n
      \n
      Is there a way for “net autodiscovery” to work without completely disabling my firewall? What ports/services should I allow? It seems the alternative is to manually specify the printer’s IP address in /etc/sane.d/epson2.conf instead of “net autodiscovery”, but I would prefer to not hardcode this.\n
      \n
      Thank you in advance for any suggestions!\n
      \n
      EDIT: Based on suggestions below, I turned on firewall logging with the instructions [cyberciti.biz/…/enable-firewalld-logging-for-deni…](https://www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):\n
      \n
      - sudo vi /etc/firewalld/firewalld.conf\n
      - Set LogDenied=all\n
      - sudo firewall-cmd --reload\n
      \n
      To find lines related to my printer (known to be at 192.168.1.57):\n
      \n
      - dmseg | grep 192.168.1.57\n
      \n
      Here is a sample of the output (192.168.1.105 is my OpenSUSE computer):\n
      \n
      [30974.673679] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37923 PROTO=UDP SPT=3289 DPT=48375 LEN=84 MARK=0x3214\n
      \n
      [30976.299712] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=37924 PROTO=UDP SPT=3289 DPT=52415 LEN=84 MARK=0x3214\n
      \n
      [31139.093164] filter_IN_public_REJECT: IN=wlp0s20f0u3 OUT= MAC= SRC=192.168.1.57 DST=192.168.1.105 LEN=104 TOS=0x00 PREC=0x00 TTL=30 ID=38084 PROTO=UDP SPT=3289 DPT=46833 LEN=84 MARK=0x3214\n
      \n
      Looks like 3289 UDP is the port of interest, and it shows up on an EPSON website ([epson.com/faq/SPT_C11CG18201~faq-0000525-shared?f…](https://epson.com/faq/SPT_C11CG18201~faq-0000525-shared?faq_cat=faq-8796127635532)). I tried adding it to “public” and “home” zones and it still doesn’t work. Is there a different zone I should be using?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729454885 {#2418
      date: 2024-10-20 22:08:05.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1408 …}
    +votes: Doctrine\ORM\PersistentCollection {#1961 …}
    +reports: Doctrine\ORM\PersistentCollection {#1972 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1399 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2440 …}
    +badges: Doctrine\ORM\PersistentCollection {#2436 …}
    +children: []
    -id: 33772
    -titleTs: "'firewal':1 'opensus':5 'prevent':2 'printing/scanning':3 'tumblewe':6"
    -bodyTs: "'-200':10 '/enable-firewalld-logging-for-deni':195 '/etc/firewalld/firewalld.conf':201 '/etc/sane.d/dll.conf':15 '/etc/sane.d/epson2.conf':21,161 '/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':198 '/faq/spt_c11cg18201~faq-0000525-shared?f':355 '/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':358 '/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':95 '0x00':253,255,286,288,319,321 '0x3214':269,302,335 '104':251,284,317 '192.168.1.105':232,249,282,315 '192.168.1.57':221,224,247,280,313 '30':257,290,323 '30974.673679':237 '30976.299712':270 '31139.093164':303 '3289':263,296,329,338 '37923':259 '37924':292 '38084':325 '46833':331 '48375':265 '52415':298 '631':97 '84':267,300,333 '8610':87 '8612':88 'ad':105,361 'address':159 'advanc':177 'allow':82,110,146 'altern':150 'autodiscoveri':24,134,165 'base':89,182 'cannot':75,124 'cmd':208 'complet':50,138 'comput':236 'connect':64 'cup':99,116 'cyberciti.biz':194 'detect':60 'didn':112 'differ':377 'disabl':47,139 'dmseg':222 'doesn':371 'dpt':264,297,330 'dst':248,281,314 'edit':181 'enabl':70 'epson':8,351 'epson.com':354,357 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?f':353 'epson.com/faq/spt_c11cg18201~faq-0000525-shared?faq_cat=faq-8796127635532)).':356 'epson2':18 'filter':238,271,304 'find':43,76,125,211 'firewal':49,53,69,141,189,207 'firewall-cmd':206 'grep':223 'group':36 'hardcod':172 'hello':1 'home':366 'howev':71 'id':258,291,324 'instead':162 'instruct':193 'interest':344 'ip':158 'known':217 'last':27 'len':250,266,283,299,316,332 'like':337 'line':19,28,212 'log':190 'logdeni':203 'look':336 'lp':35 'm':3 'mac':245,278,311 'manual':153 'mark':268,301,334 'net':23,133,164 'opensus':13,235 'option':118 'output':231 'part':32 'port':86,342 'ports/services':143 'prec':254,287,320 'prefer':169 'printer':156,216 'printer/scanner':11 'printers/scanners':44 'program':54 'proto':260,293,326 'public':102,240,273,306,364 'reject':241,274,307 'relat':213 'reload':209 'requir':41 'sampl':228 'sane':74,107,123 'say':73,122 'scanner':62,78,127 'see':114 'seem':38,148 'servic':108,111,117 'set':202 'show':347 'skanlit':58,72,120 'softwar':59 'specifi':154 'spt':262,295,328 'src':246,279,312 'still':121,370 'sudo':199,205 'suggest':91,180,184 'tcp':83 'thank':174 'tos':252,285,318 'tri':4,81,360 'ttl':256,289,322 'tumblwe':14 'turn':187 'udp':85,261,294,327,339 'uncom':20 'use':6,51,382 'user':30 'vi':200 'way':131 'websit':352 'wiki.debian.org':94 'wiki.debian.org/saneovernetwork](https://wiki.debian.org/saneovernetwork)),':93 'without':137 'wlp0s20f0u3':243,276,309 'work':56,136,373 'would':168 'www.cyberciti.biz':197 'www.cyberciti.biz/faq/enable-firewalld-logging-for-denied-packets-on-linux/)):':196 'xp':9 'yast2':52 'zone':103,367,378"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706596384
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/11317523"
    +editedAt: DateTimeImmutable @1729423135 {#1858
      date: 2024-10-20 13:18:55.0 +02:00
    }
    +createdAt: DateTimeImmutable @1706509984 {#2388
      date: 2024-01-29 07:33:04.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "As I understand this article ( [linuxconfig.org/how-to-monitor-network-activity-o…](https://linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system) ), you can disable firewall and run “sudo netstat -tulpen” to get a list of all connections and find which ports need to be forwarded."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706518256 {#4312
    date: 2024-01-29 09:50:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@iggames@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4318 …}
  +nested: Doctrine\ORM\PersistentCollection {#4320 …}
  +votes: Doctrine\ORM\PersistentCollection {#4322 …}
  +reports: Doctrine\ORM\PersistentCollection {#4324 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4328 …}
  -id: 349295
  -bodyTs: "'/how-to-monitor-network-activity-o':8 '/how-to-monitor-network-activity-on-a-linux-system)':11 'articl':5 'connect':27 'disabl':14 'find':29 'firewal':15 'forward':35 'get':22 'linuxconfig.org':7,10 'linuxconfig.org/how-to-monitor-network-activity-o':6 'linuxconfig.org/how-to-monitor-network-activity-on-a-linux-system)':9 'list':24 'need':32 'netstat':19 'port':31 'run':17 'sudo':18 'tulpen':20 'understand':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8783076"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706518256 {#4313
    date: 2024-01-29 09:50:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
45 DENIED edit 
App\Entity\Magazine {#264
  +icon: Proxies\__CG__\App\Entity\Image {#245 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#274
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#236 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
  +entries: Doctrine\ORM\PersistentCollection {#179 …}
  +posts: Doctrine\ORM\PersistentCollection {#137 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
  +bans: Doctrine\ORM\PersistentCollection {#116 …}
  +reports: Doctrine\ORM\PersistentCollection {#102 …}
  +badges: Doctrine\ORM\PersistentCollection {#80 …}
  +logs: Doctrine\ORM\PersistentCollection {#70 …}
  +awards: Doctrine\ORM\PersistentCollection {#1360 …}
  +categories: Doctrine\ORM\PersistentCollection {#1792 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#268
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#270
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details