Publishing TCP/IP Printers through ISA

[otto]

I am trying to publish a TCP/IP LPR printer on the Internet.

I've set up ISA according to KB:306071 but I'm getting a printer error.
I've heard I can use Telnet with the port number to check connectivity
through the firewall but I'm not sure what I am looking at. It seems to
connect but doesn't start a Telnet session with the print server. What
tools could I use to troublehoot this problem?

I've tried adding protocol rules and packet filters in addition to the
server publishing rule but still no luck printing. I've restarted ISA after
each change. I don't have any trouble printing if I change the client
printer driver port to the internal network address of the print server and
use a vpn connection.

 

[Diana Smith [MSFT]]

Hi Otto,

What is the exact error message that you are getting?

Thank You.

Diana.

 

[otto]

If I print a test page, in the print queue on the client I see in the
status: 'Printing - Printer Busy or Error'

 

[Diana Smith [MSFT]]

Hello Otto,

Here are some tools that you can use to test the ports:
310456 How to Use Portqry to Troubleshoot Active Directory Connectivity
Issues
http://support.microsoft.com/?id=310456

260142 How to Troubleshoot Windows 2000 Printing Problems
http://support.microsoft.com/?id=260142

Thank You.

Diana.

 

[otto]

Thanks, I've narrowed my problem to the ISA server. I'm using a publishing
rule to map lpr requests on port 515 with secondary ports 721-731 with no
luck. I've also tried creating an IP packet filter also with no luck. The
published printer is a secure NAT client with its router/gateway set to the
internal address of the ISA server. It shows in the firewall monitoring
sessions as a firewall client same as my other published servers. The ISA
packet filter logs show ALLOWED ack and syn tcp flags, param #2 515, param
#1 731. I'm using snoop on the published server to monitor incoming
communincations to the print server.

If I print to the printer from the ISA server, snoop shows ISA used source
port 721 and destination port (PRINTER) 515. When I print from the Internet
I see no activity at all. It seems like the ISA server doesn't relay the
request to the published server which in turn results in my general printer
error.

The published server I'm using is a SUN OS 5.8 which serves a Xerox NPS 135
printer.

Any help is greatly appreciated!

 

[Diana Smith [MSFT]]

Hi Otto,

Unfortunately, we are getting out of the realm that I can assist with.

Diana.