Networking/firewalling configuration for local printing

Networking & ports

directprint.io makes use of various protocols and ports to enable printing. This document outlines the port, protocol, route, and reason for the ports.

Please use this information to configure firewalls or web application proxies that may otherwise block print traffic.

Required ports and routes

Web/HTTP/HTTPS proxy users

If your network proxies ALL HTTP and HTTPS traffic from your device fleet to the Internet and local network, it's likely that you will experience problems when printing.

To enable printing proxy exclusion/bypass, lists will be required to allow the client devices to communicate directly with the printers.

The network administrator will need to include proxy exclusion lists in one of the following places:

Option 1 - Exclude all local network traffic from proxy - using proxy.pac configuration

For example, configure your clients not to use the proxy for local network traffic.

If you have a 172.16.x.x address range the administrator will need to exclude proxy for all traffic with destination 172.16.*.*. or exclude a list of printer hostnames or IP addresses from proxying. An example of such a local-network excluded proxy.pac configuration file can be found below:

function FindProxyForURL(url, host) {
 
// If the hostname matches, send direct.
if (dnsDomainIs(host, "intranet.domain.com") ||
	shExpMatch(host, "(*.abcdomain.com|abcdomain.com)"))
	return "DIRECT";
 
// If the protocol or URL matches, send direct.
if (url.substring(0, 4)=="ftp:" ||
	shExpMatch(url, "http://abcdomain.com/folder/*"))
	return "DIRECT";
 
// If the requested resource (e.g. printer) is hosted within the internal network, send direct.
if (isPlainHostName(host) ||
	shExpMatch(host, "*.local") ||
	isInNet(dnsResolve(host), "10.0.0.0", "255.0.0.0") ||
	isInNet(dnsResolve(host), "172.16.0.0",  "255.240.0.0") ||
	isInNet(dnsResolve(host), "192.168.0.0",  "255.255.0.0") ||
	isInNet(dnsResolve(host), "127.0.0.0", "255.255.255.0"))
	return "DIRECT";
	 
// If the IP address of the local machine is within a defined
// subnet, send to a specific proxy.
if (isInNet(myIpAddress(), "10.10.5.0", "255.255.255.0"))
	return "PROXY 1.2.3.4:8080";
 
// DEFAULT RULE: All other traffic, use below proxies, in fail-over order.
return "PROXY 4.5.6.7:8080; PROXY 7.8.9.10:8080";
 
}

Option 2 - G Suite users - use the network configuration section to exclude printer addresses

Chromebook admins are able to provide manual proxy-bypass lists to Chrome devices through the G Suite admin panel.

1. In the G Suite console navigate to Device management > Networks > WIFI (or Ethernet).
2. Add or edit an existing WiFi or Ethernet network.
3. Select 'Manual Proxy Configuration' and enter the proxy information, proxy server IP/hostname, and port.
4. Enter a network range or specific IP addresses for the printers. e.g. 172.16.5.53 (specific printer), xerox1.mydomain (specific printer by hostname) or 172.16.5.* (e.g. local subnet).

Proxy server settings.