Available in PaperCut NG and PaperCut MF.

Enable ports 80 (HTTP) and 443 (HTTPS)

By default, PaperCut NG/MF listens to ports 9191 and 9192 for HTTP and HTTPS communication respectively. These ports accept been selected as they're more often than not unused past other applications. Because PaperCut NG/MF is a web application, you might want to have the interface available on the standard HTTP and HTTPS ports (eighty and 443 respectively). One reason for doing so is to simplify URLs communicated verbally (as the user does non demand to supply a port number).

The configuration process is different for each operating system. Meet below for instructions. Important: Before y'all begin, ensure no other applications (such as IIS, or Apache) are currently installed and using ports 80 or 443 on the server hosting PaperCut NG/MF.

IMPORTANT

The following directions detail how to enable port fourscore in addition to port 9191. Enabling an additional port is recommended over irresolute the existing port. Port 9191 is also used for server-to-server and client-to-server communication so it'due south of import that this port go along to exist made available.

Also brand sure you you enable the lxxx and 443 firewall ports if users access PaperCut NG/MF across firewall devices.

Windows

  1. Open the file: [app-path]\server\server.properties

  2. Enable port 80 (and 443) past irresolute the appropriate settings from Due north to a Y. They should await similar:

    server.enable-http-on-port-80=Y

    server.enable-https-on-port-443=Y

  3. Modify the server port in all providers installed on your network. The server port is ready in the impress-provider.conf file in the provider directory.

  4. Modify the server port in the User ClientThe User Client tool is an add together-on that resides on a user's desktop. It allows users to view their current account balance via a popup window, provides users with the opportunity to confirm what they are nigh to print, allows users to select shared accounts via a popup, if administrators have granted access to this feature, and displays organization messages, such as the "low credit" alert message or print policy popups. config file:

    [app-path]\client\config.properties.

    Important

    If the client is installed locally on workstations, then modify the config file on each workstation. On Linux/Unix systems, the server runs under the privilege of a non-root account. Some systems prevent non-root users from binding to ports lower than 1024. An alternating pick is to use kernel level TCP port redirection (e.g. iptables).

  5. Restart the Awarding ServerAn Application Server is the primary server plan responsible for providing the PaperCut user interface, storing data, and providing services to users. PaperCut uses the Application Server to manage user and account information, manage printers, summate impress costs, provide a web browser interface to administrators and end users, and much more. . (See Stop and start the Application Server).

  6. Test and ensure the web interface is working. eastward.g. http://[myserver]/admin

Linux

On Linux systems, simply privileged programs that run as root can use ports under 1024. In line with security all-time practice PaperCut runs as a not-privileged user. To enable port eighty and 443, use iptables (or ipchains on old systems) to port-frontward 80 to 9191. The post-obit commands provide an example. Consult your distribution'south documentation to encounter how to persist the iptables rules between organization restarts:

/sbin/iptables -t nat -I PREROUTING --src 0/0 --dst <server_ip> \

-p tcp --dport 80 -j REDIRECT --to-ports 9191

/sbin/iptables -t nat -I PREROUTING --src 0/0 --dst <server_ip> \

-p tcp --dport 443 -j REDIRECT --to-ports 9192

(These commands would typically exist placed in an rc init script or the iptables startup config script as provided by your distribution.)

When you lot are washed, restart the Awarding Server. (Encounter End and get-go the Application Server).

Mac

The approach on Mac systems is similar to Linux. With the release of Mac Bone X ten.11 (El Capitan) and the inclusion of Arrangement Integrity Protection (SIP) modifications to /System/ are disabled past default and disabling this feature is not recommended. The post-obit information works for Mac OS X 10.10. For Mac OS X 10.x and subsequently, the support for the IPFW firewall has been removed in favor of PF.

Mac Bone X 10.x

From Mac Os X ten.10, you lot must utilise the pfctl control to modify the Mac firewall.

  1. Create the ballast file:

    sudo vi /etc/pf.anchors/com.papercut

  2. Modify the /etc/pf.anchors/com.papercut file past adding the following lines:

    rdr pass on lo0 inet proto tcp from whatever to self port eighty -> 127.0.0.i port 9191

    rdr laissez passer on en0 inet proto tcp from whatsoever to any port 80 -> 127.0.0.i port 9191

    rdr pass on en1 inet proto tcp from any to any port fourscore -> 127.0.0.i port 9191

  3. Examination the anchor file:

    sudo pfctl -vnf /etc/pf.anchors/com.papercut

  4. Add the anchor file to the pf.conf file:

    sudo 6 /etc/pf.conf

    Then add together in the following lines under each corresponding department - e.1000. the rdr-anchor line nether the electric current rdr-anchor line, and the load ballast nether the electric current load-anchor statement:

    rdr-anchor "port80"

    load anchor "port80" from "/etc/pf.anchors/com.papercut"

  5. Load the pf.conf file automatically at startup past editing the electric current daemon for pf:

    sudo vi /System/Library/LaunchDaemons/com.apple tree.pfctl.plist

    Then inside the department detailing the program arguments <fundamental>ProgramArguments</fundamental>, add in an extra string with -eastward, which enables the config, every bit per:

    <cord>pfctl</string>

    <string>-e</cord>

    <string>-f</string>

    <cord>/etc/pf.conf</cord>

    So salve the file, exit and restart the server to test.

  6. To test this method manually (no restart required) you can utilise the pfctl control:

    sudo pfctl -ef /etc/pf.conf

    This loads and enables the pf.conf file, which then calls the com.papercut ballast file.

  7. Restart the Awarding Server. (Come across Terminate and start the Application Server).

Mac OS 10 x.nine and earlier

In Mac Bone X 10.9 and earlier, one needs to use the ipfw command to modify the Mac firewall:

sudo /sbin/ipfw add 102 fwd 127.0.0.1,9191 tcp from whatever to any 80 in

See the ipfw human being folio for all the scary details!