[Samba] slow printing from firewalled/masqueraded clients

[Andrew Bartlett]

On Wed, 2004-03-24 at 04:09, Paul Raines wrote:
> Printing to a samba print share from a client that is firewalled/
> masqueraded is painfully slow.  Seems the protocol requires the samba
> server to make an initiating connection back to the SMB server on the
> client which will of course fail on a firewalled/masqueraded client.
> 
> The problem is that the a print job hangs till this operation times out
> causing printing to take several minutes for users. Is there anyway to
> decrease this timeout in samba?  I have seen suggestions to use 'disable
> spoolss' but this would cause more problems since that also disables
> downloading of print drivers.

Welcome to the wonderful world of SPOOLSS printing.  The issue is that a
print server providing SPOOLSS is expected to make a *reverse*
connection, from the print server, to the print client.  

This is not some part of the same TCP/IP socket, but a brand new,
separate connection.  No firewall knows that this particular connection
is 'special', hence your results.

More interestingly, MS is going to drop a default firewall on XP SP2.  I
wonder what it will do when it encounters this problem.  Maybe MS has a
more sane protocol now...

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040324/778f8368/attachment.bin