My old Epson printer is running out of ink. Now what?

The inkjet is used for printing out stuff from the internet (get your mind out of the gutter!)

Oh, you mean this sort of racy item isn’t what colour is for?

if you ignore the Bonjour protocol.

There are instructions for the setup of printers at work involving turning off unwanted protocols :)

you ought to be able to portscan devices on the LAN to see what’s listening on port 631 (IPP) and then extract info on the printer’s capabilities from that.

A fair number of printers have matching PC drivers that take the feedback to tell the user the status and capabilities of the printer. Want to kill the capabilities? Just turn off that super secure protocol known as SNMP…

Apple… don’t tend to document stuff like that publicly.

Apple don’t document stuff truthfully regarding things like firewall ports required open for things like Facetime. Read their documents, then read around and you’ll find an article or two that gives you everything. That’s for something they want you to do.

Oh, you mean this sort of racy item isn’t what colour is for?

I was thinking more…

Just turn of that super secure protocol

I’m surprised my printer does all of its advertised things, given that UPnP is deader than the proverbial nail on my router.

Apple don’t document stuff truthfully

Maybe it works correctly if you have an Apple router? :-p

I was thinking more…

Meep.

I’m surprised my printer does all of its advertised things, given that UPnP is deader than the proverbial nail on my router.

The router isn’t responding to UPnP queries, it happily forwards the packets though. What you would need is a switch/router, internally, that everything goes through that supports ACL’s.

Maybe it works correctly if you have an Apple router? :-p

No, it works properly if you find a site that lists most of the requirements (Apple take delight in changing things) and then examine the “live” logs on the firewall to see what else is undocumented¹.

The Apple version of the setup was described by our main security guy as “Open up to the point where you are effectively dropping your trousers, bending over and waiting to see what happens. What I refer to as a full moon.”

¹ Someone, close to this keyboard, did just that and got things working just fine without opening up everything to Apple. They say you need to open up to 17.0.0.0/8 which is a lie, it always talks to the same single IP.
They won’t tell you how to control access to their update server either (important if critical apps need testing on a new IOS and being updated before the IOS update breaks them.) The answer there is DNS poisoning for mesu.apple.com.

I’m surprised my printer does all of its advertised things, given that UPnP is deader than the proverbial nail on my router.

The router isn’t responding to UPnP queries, it happily forwards the packets though. What you would need is a switch/router, internally, that everything goes through that supports ACL’s.

Uhhh… The router actually was responding to UPnP requests. My first IP camera was accessible from the WAN and I wanted to know how, given I hadn’t set it up to do that. Turns out that it used UPnP to grant itself access rights to have port 80 forwarded to it (I wasn’t happy, given port 80 was the Pi’s server!). I restored the settings and tried again to verify behaviour, and then restored the settings and told the Livebox not to honour UPnP and “lo! IP camera no longer hijacked port 80”.

Makes me what happens if the user had multiple cameras – would they all fight over the one port? I actually had multiple cameras, but by then everything was set up manually, and then after inadvertently discovering a ridiculously big security failure that camera is no longer accessible from the Internet… I keep meaning to write a little WebJames CGI thingy to send commands to the camera and send back a JPEG, but it’s not anything even remotely resembling a priority… ;-)