Page 1 of 2 12 LastLast
Results 1 to 10 of 12
  1. #1
    Junior Member
    Join Date
    Oct 2017
    Posts
    6
    Rep Power
    0

    Weird prints after doing portforward to printer.

    Hi

    We experience problems in general, with our Ricoh MFP's when setting them up for direct print, through the internet.

    They randomly print out some pages, with "aCoockie: msthash=hello/administrator" - "get/http host : x.x.x.x Connection keep-alive" and other "commands".


    My portforwaring are as follows:

    TCP 515 (LPR/LPD) * 515 192.168.1.199:515
    TCP Print Port 9100 RAW * 9100 192.168.1.199:9100
    UDP 161 (SNMP) * 161 192.168.1.199:161
    UDP 162 (SNMP Traps) * 162 192.168.1.199:162

    I've have attached some of the documents for illustration.

    What to do? Do I miss some ports, for communication? Or is it people from outside, who try to access it?
    This particular machine, is only setup on 1 PC at the moment, so it's not a post script issue.


    Thanks

    Attached Images Attached Images

  2. #2
    Just a tech 100+ Posts keithxxiii's Avatar
    Join Date
    Nov 2014
    Posts
    179
    Rep Power
    11

    Re: Weird prints after doing portforward to printer.

    What machine models do you have?

    Is postscript present on those devices?

    Are the required ports open from network security of the machine?

    Aye! Cut the crap

  3. #3
    Service Manager 2,500+ Posts
    Weird prints after doing portforward to printer.

    Phil B.'s Avatar
    Join Date
    Jul 2016
    Location
    Raleigh NC
    Posts
    2,851
    Rep Power
    44

    Re: Weird prints after doing portforward to printer.

    Quote Originally Posted by CloussiDee View Post
    Hi
    We experience problems in general, with our Ricoh MFP's when setting them up for direct print, through the internet.
    They randomly print out some pages, with "aCoockie: msthash=hello/administrator" - "get/http host : x.x.x.x Connection keep-alive" and other "commands".
    My portforwaring are as follows:
    TCP 515 (LPR/LPD) * 515 192.168.1.199:515
    TCP Print Port 9100 RAW * 9100 192.168.1.199:9100
    UDP 161 (SNMP) * 161 192.168.1.199:161
    UDP 162 (SNMP Traps) * 162 192.168.1.199:162
    I've have attached some of the documents for illustration.
    What to do? Do I miss some ports, for communication? Or is it people from outside, who try to access it?
    This particular machine, is only setup on 1 PC at the moment, so it's not a post script issue.
    Thanks
    has their IT people made sure those ports are active and not blocked?


  4. #4
    Senior Tech. 2,500+ Posts NeoMatrix's Avatar
    Join Date
    Nov 2010
    Location
    Sunshine State QLD.
    Posts
    2,857
    Rep Power
    73

    Re: Weird prints after doing portforward to printer.

    First post since 2017...
    Does the computer code shown below help?

    captcha2.png

    What if we could count the stars... , what number would you stop at...?"
    [Exchange manual acquisitions, PM's CTN members only. ]
    •••••• •••[§]• |N | € | o | M | Δ | t | π | ‘ | x | •[§]••• ••••••

  5. #5
    Service Manager 1,000+ Posts rthonpm's Avatar
    Join Date
    Aug 2007
    Location
    Pennsyltucky
    Posts
    1,741
    Rep Power
    52

    Re: Weird prints after doing portforward to printer.

    If you have those ports exposed to the public internet, it's likely that you're getting sniffers, infected machines looking for other things to spread to, and all kinds of other scanning tools hitting the ports which the MFP then interprets as a print job.

    Is there some kind of reason you'd even consider exposing those ports? There's never a good reason to expose the ports as opposed to using a VPN service or some kind of remote access solution.


  6. #6
    Geek Extraordinaire 2,500+ Posts KenB's Avatar
    Join Date
    Dec 2007
    Location
    Cleveland, Ohio
    Posts
    3,042
    Rep Power
    76

    Re: Weird prints after doing portforward to printer.

    I had a similar situation some years back.

    While not exposed to the outside world, a machine was printing junk every so often, but at least a few times a day.

    The customer was able to narrow it down to a few certain times, within a 5 minute or so window.

    We ran Wireshark to monitor the traffic. Sure enough, we found the IP address of the source.

    Turned out someone in the IT department had an old NT4 machine he had been experimenting with, but forgot about...problem found and solved.

    Some days you’re the dog, some days you’re the fire hydrant.

  7. #7
    Junior Member
    Join Date
    Oct 2017
    Posts
    6
    Rep Power
    0

    Re: Weird prints after doing portforward to printer.

    Quote Originally Posted by keithxxiii View Post
    What machine models do you have?

    Is postscript present on those devices?

    Are the required ports open from network security of the machine?

    It's happening on MPC5502, MPC2500 and MPC5000

    The 5502 has postscript installed, not the other 2.


    Ports are working fine - 2 Setups with a Linksys router, and the last on UBNT Unifi.


  8. #8
    Junior Member
    Join Date
    Oct 2017
    Posts
    6
    Rep Power
    0

    Re: Weird prints after doing portforward to printer.

    Quote Originally Posted by Phil B. View Post
    has their IT people made sure those ports are active and not blocked?

    Yes, portsforwarding are ok - print/installation/status on the printers are also ok.


    Like i replied on the last post - 2 setups with Linksys router and 1 on UBNT unifi. Same ports forwarded.


  9. #9
    Junior Member
    Join Date
    Oct 2017
    Posts
    6
    Rep Power
    0

    Re: Weird prints after doing portforward to printer.

    Quote Originally Posted by rthonpm View Post
    If you have those ports exposed to the public internet, it's likely that you're getting sniffers, infected machines looking for other things to spread to, and all kinds of other scanning tools hitting the ports which the MFP then interprets as a print job.

    Is there some kind of reason you'd even consider exposing those ports? There's never a good reason to expose the ports as opposed to using a VPN service or some kind of remote access solution.

    I'm aware that i'm exposing the ports - We started out with only port 9100, but that made some problems with status on the print/toner etc.


    The reasen for this solution, is that we have 15 different users, who want to access the same printer, and they have 15 different ISP's. So local printing is not a solution.


  10. #10
    Junior Member
    Join Date
    Oct 2017
    Posts
    6
    Rep Power
    0

    Re: Weird prints after doing portforward to printer.

    Quote Originally Posted by KenB View Post
    I had a similar situation some years back.

    While not exposed to the outside world, a machine was printing junk every so often, but at least a few times a day.

    The customer was able to narrow it down to a few certain times, within a 5 minute or so window.

    We ran Wireshark to monitor the traffic. Sure enough, we found the IP address of the source.

    Turned out someone in the IT department had an old NT4 machine he had been experimenting with, but forgot about...problem found and solved.


    Thanks for the input - Maybe that will be the solution.

    My impression is though, that it is happening after using the "remote print". Sometimes several hours after.
    Days where it is not used, we dont get any junk prints.


Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Get the Android App
click or scan for the Copytechnet Mobile App

-=-=-=-=-=-


IDrive Remote Backup

Lunarpages Internet Solutions

Advertise on Copytechnet

Your Link Here