Available in PaperCut NG and PaperCut MF.

Enable ports 80 (HTTP) and 443 (HTTPS)

By default, PaperCut NG/MF listens to ports 9191 and 9192 for HTTP and HTTPS communication respectively. These ports have been selected as they're generally unused by other applications. Considering PaperCut NG/MF is a web awarding, you might want to have the interface available on the standard HTTP and HTTPS ports (80 and 443 respectively). 1 reason for doing and so is to simplify URLs communicated verbally (as the user does non need to supply a port number).

The configuration procedure is different for each operating system. Meet below for instructions. Important: Earlier you begin, ensure no other applications (such as IIS, or Apache) are currently installed and using ports 80 or 443 on the server hosting PaperCut NG/MF.

IMPORTANT

The following directions item how to enable port 80 in addition to port 9191. Enabling an additional port is recommended over changing the existing port. Port 9191 is also used for server-to-server and customer-to-server communication then information technology's important that this port go on to be made available.

Too make sure you lot you enable the lxxx and 443 firewall ports if users access PaperCut NG/MF across firewall devices.

Windows

  1. Open the file: [app-path]\server\server.properties

  2. Enable port 80 (and 443) past changing the appropriate settings from N to a Y. They should look like:

    server.enable-http-on-port-80=Y

    server.enable-https-on-port-443=Y

  3. Change the server port in all providers installed on your network. The server port is fix in the print-provider.conf file in the provider directory.

  4. Alter the server port in the User CustomerThe User Client tool is an improver that resides on a user's desktop. It allows users to view their electric current account residual via a popup window, provides users with the opportunity to confirm what they are about to print, allows users to select shared accounts via a popup, if administrators take granted access to this feature, and displays arrangement messages, such as the "low credit" alert message or print policy popups. config file:

    [app-path]\client\config.backdrop.

    IMPORTANT

    If the client is installed locally on workstations, so change the config file on each workstation. On Linux/Unix systems, the server runs under the privilege of a not-root account. Some systems forbid not-root users from binding to ports lower than 1024. An alternating option is to use kernel level TCP port redirection (e.yard. iptables).

  5. Restart the Application ServerAn Application Server is the primary server plan responsible for providing the PaperCut user interface, storing data, and providing services to users. PaperCut uses the Application Server to manage user and account information, manage printers, calculate print costs, provide a web browser interface to administrators and end users, and much more than. . (See Stop and start the Application Server).

  6. Test and ensure the web interface is working. e.g. http://[myserver]/admin

Linux

On Linux systems, only privileged programs that run as root can use ports under 1024. In line with security best practice PaperCut runs as a non-privileged user. To enable port 80 and 443, use iptables (or ipchains on old systems) to port-forward lxxx to 9191. The following commands provide an example. Consult your distribution's documentation to run into how to persist the iptables rules between system restarts:

/sbin/iptables -t nat -I PREROUTING --src 0/0 --dst <server_ip> \

-p tcp --dport 80 -j REDIRECT --to-ports 9191

/sbin/iptables -t nat -I PREROUTING --src 0/0 --dst <server_ip> \

-p tcp --dport 443 -j REDIRECT --to-ports 9192

(These commands would typically be placed in an rc init script or the iptables startup config script as provided by your distribution.)

When yous are done, restart the Awarding Server. (See Stop and start the Awarding Server).

Mac

The approach on Mac systems is like to Linux. With the release of Mac Os X x.11 (El Capitan) and the inclusion of Organization Integrity Protection (SIP) modifications to /System/ are disabled past default and disabling this feature is not recommended. The following data works for Mac OS X 10.10. For Mac OS 10 x.10 and later, the support for the IPFW firewall has been removed in favor of PF.

Mac OS 10 x.10

From Mac Os X 10.10, you must use the pfctl command to modify the Mac firewall.

  1. Create the anchor file:

    sudo vi /etc/pf.anchors/com.papercut

  2. Change the /etc/pf.anchors/com.papercut file by adding the following lines:

    rdr laissez passer on lo0 inet proto tcp from any to cocky port 80 -> 127.0.0.1 port 9191

    rdr laissez passer on en0 inet proto tcp from whatsoever to any port lxxx -> 127.0.0.1 port 9191

    rdr laissez passer on en1 inet proto tcp from any to whatever port 80 -> 127.0.0.i port 9191

  3. Test the anchor file:

    sudo pfctl -vnf /etc/pf.anchors/com.papercut

  4. Add the anchor file to the pf.conf file:

    sudo vi /etc/pf.conf

    Then add in the post-obit lines under each corresponding section - e.yard. the rdr-anchor line under the current rdr-ballast line, and the load anchor under the current load-anchor statement:

    rdr-anchor "port80"

    load anchor "port80" from "/etc/pf.anchors/com.papercut"

  5. Load the pf.conf file automatically at startup past editing the current daemon for pf:

    sudo vi /Organisation/Library/LaunchDaemons/com.apple.pfctl.plist

    And then within the section detailing the program arguments <key>ProgramArguments</central>, add in an extra string with -eastward, which enables the config, as per:

    <cord>pfctl</string>

    <cord>-e</string>

    <string>-f</string>

    <string>/etc/pf.conf</string>

    Then save the file, exit and restart the server to exam.

  6. To exam this method manually (no restart required) you lot tin can use the pfctl command:

    sudo pfctl -ef /etc/pf.conf

    This loads and enables the pf.conf file, which then calls the com.papercut anchor file.

  7. Restart the Awarding Server. (See Stop and start the Application Server).

Mac Bone Ten 10.9 and earlier

In Mac Bone Ten 10.9 and earlier, ane needs to apply the ipfw command to modify the Mac firewall:

sudo /sbin/ipfw add together 102 fwd 127.0.0.1,9191 tcp from any to any eighty in

See the ipfw man folio for all the scary details!