So there is a network: Router is an OpenWrt 12.04 on a WRT160NL.

We got a new network printer. But it's www server is reachable to everyone in the network (and thus everyone can print with it..).

Q: How can I disable the network access for all the machines in - and only let 2 IP's ex.: and .20 to access the printer? - there isn't ANY access control on the network printer...

  • Do you have a firewall? – Joseph R. Oct 4 '13 at 19:48
  • the router connects to the ISP, and the clients connect to the router. iptables is on openwrt. – gasko peter Oct 4 '13 at 19:49
  • I haven't tried this before, but I think what you want should be possible if you connect the printer to your router instead of a switch (so that it's only accessible through the router's firewall) and configure iptables to drop any traffic whose destination is the printer's IP and whose source isn't one of the two allowed IPs. – Joseph R. Oct 4 '13 at 19:52

Sorry, you would probably need additional hardware for that.

You need to put the network printer in an independent subnet, connected through a firewall. If you had VLAN support on the internal switch, you could put the network printer's port on a separate VLAN. OpenWrt supports VLANs in general, but unfortunately your hardware isn't working correctly at the moment.


But if your printer also supports USB, you might use that with the routers USB port. The recommended solution is p910nd. Then you could control access using firewall rules.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.