(Created page with "=Description= This is the test case to check if it's possible for other applications (system-config-printer in this case) to modify the firewall. =How to test= === Prerequisit...") |
mNo edit summary |
||
| Line 5: | Line 5: | ||
=How to test= | =How to test= | ||
=== Prerequisites === | === 1. Prerequisites === | ||
First get and install testing packages [http://koji.fedoraproject.org/koji/taskinfo?taskID=3896745 system-config-printer-1.3.9-2.firewalld.fc17] | First get and install testing packages [http://koji.fedoraproject.org/koji/taskinfo?taskID=3896745 system-config-printer-1.3.9-2.firewalld.fc17] | ||
| Line 16: | Line 16: | ||
firewall-cmd --add --interface em1 | firewall-cmd --add --interface em1 | ||
=== Run system-config-printer === | === 2. Run system-config-printer === | ||
system-config-printer --debug | system-config-printer --debug | ||
| Line 29: | Line 29: | ||
Press 'Adjust Firewall'. | Press 'Adjust Firewall'. | ||
=== Check === | === 3. Check === | ||
After this the needed services should be allowed for 60 seconds, see | After this the needed services should be allowed for 60 seconds, see | ||
Revision as of 15:03, 16 March 2012
Description
This is the test case to check if it's possible for other applications (system-config-printer in this case) to modify the firewall.
How to test
1. Prerequisites
First get and install testing packages system-config-printer-1.3.9-2.firewalld.fc17
Then you need to have firewalld running, see Test case 1.
Also the network interface should be in a zone. Either run NetworkManager (see Test case 3), which adds the interface into zone or add it yourself with
firewall-cmd --add --interface em1
2. Run system-config-printer
system-config-printer --debug
Click the blue 'plus' button. After entering your password you should see a dialog asking you if you want to adjust firewall. Whether you see the dialog and what items the dialog contains depends on what zone the interface is in. For example: In 'trusted' zone you won't see the dialog at all because all trafic is trusted. In 'work' zone it will ask you for allowing of 'mDNS traffic'. In 'public' (the default) it will ask you also for allowing of 'IPP Browse packets'. Press 'Adjust Firewall'.
3. Check
After this the needed services should be allowed for 60 seconds, see
firewall-cmd --list=all
and check that you see ipp-client, mdns and ipp services.
In the output of system-config-printer --debug you should see something similar to:
Using FirewallD, active zone: public Examining firewall Asking for permission to adjust firewall: The firewall may need adjusting in order to detect network printers. Adjust the firewall now? - Allow all incoming IPP Browse packets - Allow all incoming mDNS traffic Fetching devices after firewall dialog response