How can I limit engagement with a large office LAN?












6














I work in a large office building with hundreds of other computers on the same LAN. I don't have any reason to communicate with most of these computers, and when I do, it's always on an "opt-in" basis (like adding a network mount to my fstab). But Linux Mint is automatically adding printers throughout the building, and the "Network" sidebar in my file manager is filled with computers that belong to people I don't know. Finally, /var/log/syslog is filled with entries like the following, that make it difficult to find issues of real importance:



org.gtk.vfs.Daemon[2500]: ** (process:6388): WARNING **: Failed to resolve service name 'XXX': Too many objects
avahi-daemon[872]: dbus-protocol.c: Too many objects for client ':1.65', client request failed.


I would like to disable this automatic discovery of services, especially printers and network shares. I also would like to ensure that my computer is not automatically broadcasting any information about itself to the rest of the LAN.



What steps should I take to do this? Is it sufficient to disable avahi-daemon?










share|improve this question


















  • 1




    That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
    – dirkt
    Oct 19 '18 at 6:24










  • Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
    – Kurt Pfeifle
    Dec 24 '18 at 23:43
















6














I work in a large office building with hundreds of other computers on the same LAN. I don't have any reason to communicate with most of these computers, and when I do, it's always on an "opt-in" basis (like adding a network mount to my fstab). But Linux Mint is automatically adding printers throughout the building, and the "Network" sidebar in my file manager is filled with computers that belong to people I don't know. Finally, /var/log/syslog is filled with entries like the following, that make it difficult to find issues of real importance:



org.gtk.vfs.Daemon[2500]: ** (process:6388): WARNING **: Failed to resolve service name 'XXX': Too many objects
avahi-daemon[872]: dbus-protocol.c: Too many objects for client ':1.65', client request failed.


I would like to disable this automatic discovery of services, especially printers and network shares. I also would like to ensure that my computer is not automatically broadcasting any information about itself to the rest of the LAN.



What steps should I take to do this? Is it sufficient to disable avahi-daemon?










share|improve this question


















  • 1




    That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
    – dirkt
    Oct 19 '18 at 6:24










  • Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
    – Kurt Pfeifle
    Dec 24 '18 at 23:43














6












6








6


1





I work in a large office building with hundreds of other computers on the same LAN. I don't have any reason to communicate with most of these computers, and when I do, it's always on an "opt-in" basis (like adding a network mount to my fstab). But Linux Mint is automatically adding printers throughout the building, and the "Network" sidebar in my file manager is filled with computers that belong to people I don't know. Finally, /var/log/syslog is filled with entries like the following, that make it difficult to find issues of real importance:



org.gtk.vfs.Daemon[2500]: ** (process:6388): WARNING **: Failed to resolve service name 'XXX': Too many objects
avahi-daemon[872]: dbus-protocol.c: Too many objects for client ':1.65', client request failed.


I would like to disable this automatic discovery of services, especially printers and network shares. I also would like to ensure that my computer is not automatically broadcasting any information about itself to the rest of the LAN.



What steps should I take to do this? Is it sufficient to disable avahi-daemon?










share|improve this question













I work in a large office building with hundreds of other computers on the same LAN. I don't have any reason to communicate with most of these computers, and when I do, it's always on an "opt-in" basis (like adding a network mount to my fstab). But Linux Mint is automatically adding printers throughout the building, and the "Network" sidebar in my file manager is filled with computers that belong to people I don't know. Finally, /var/log/syslog is filled with entries like the following, that make it difficult to find issues of real importance:



org.gtk.vfs.Daemon[2500]: ** (process:6388): WARNING **: Failed to resolve service name 'XXX': Too many objects
avahi-daemon[872]: dbus-protocol.c: Too many objects for client ':1.65', client request failed.


I would like to disable this automatic discovery of services, especially printers and network shares. I also would like to ensure that my computer is not automatically broadcasting any information about itself to the rest of the LAN.



What steps should I take to do this? Is it sufficient to disable avahi-daemon?







networking printing cups lan avahi






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Oct 18 '18 at 16:33









cxrodgers

12617




12617








  • 1




    That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
    – dirkt
    Oct 19 '18 at 6:24










  • Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
    – Kurt Pfeifle
    Dec 24 '18 at 23:43














  • 1




    That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
    – dirkt
    Oct 19 '18 at 6:24










  • Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
    – Kurt Pfeifle
    Dec 24 '18 at 23:43








1




1




That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
– dirkt
Oct 19 '18 at 6:24




That depends on exactly how these devices are discovered. Yes, first guess (and first step) would be to disable avahi. If you still have devices/printers after that, next step is to investigate why those show up.
– dirkt
Oct 19 '18 at 6:24












Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
– Kurt Pfeifle
Dec 24 '18 at 23:43




Disabling the avahi-daemon in toto may deprive you of other (than print) services, which you may still want or need.
– Kurt Pfeifle
Dec 24 '18 at 23:43










1 Answer
1






active

oldest

votes


















1
















  1. Stop the CUPS service (embodied by a process called cupsd), for example



    sudo service cups stop



  2. Open /etc/cups/cupsd.conf in your favorite editor, for example



    sudo vim /etc/cups/cupsd.conf



  3. Look if there is a line in this file saying



    Browsing  Yes


    and change this line to



    Browsing  No


    This should disable the sharing of your own print queues installed locally with the other computers in the same network. (I'm simply assuming you do not want this, given that you also do not want to 'see' other printers shared by other computers...)




  4. Likewise, make sure that file has the following lines:



    BrowseLocalProtocols  none
    BrowseDNSSDSubTypes none
    DefaultShared No


    The first two should disable the automatic addition of printers shared on the network.




  5. Now start the CUPS service again, for example



    sudo service cups start







share|improve this answer





















    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f476372%2fhow-can-i-limit-engagement-with-a-large-office-lan%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1
















    1. Stop the CUPS service (embodied by a process called cupsd), for example



      sudo service cups stop



    2. Open /etc/cups/cupsd.conf in your favorite editor, for example



      sudo vim /etc/cups/cupsd.conf



    3. Look if there is a line in this file saying



      Browsing  Yes


      and change this line to



      Browsing  No


      This should disable the sharing of your own print queues installed locally with the other computers in the same network. (I'm simply assuming you do not want this, given that you also do not want to 'see' other printers shared by other computers...)




    4. Likewise, make sure that file has the following lines:



      BrowseLocalProtocols  none
      BrowseDNSSDSubTypes none
      DefaultShared No


      The first two should disable the automatic addition of printers shared on the network.




    5. Now start the CUPS service again, for example



      sudo service cups start







    share|improve this answer


























      1
















      1. Stop the CUPS service (embodied by a process called cupsd), for example



        sudo service cups stop



      2. Open /etc/cups/cupsd.conf in your favorite editor, for example



        sudo vim /etc/cups/cupsd.conf



      3. Look if there is a line in this file saying



        Browsing  Yes


        and change this line to



        Browsing  No


        This should disable the sharing of your own print queues installed locally with the other computers in the same network. (I'm simply assuming you do not want this, given that you also do not want to 'see' other printers shared by other computers...)




      4. Likewise, make sure that file has the following lines:



        BrowseLocalProtocols  none
        BrowseDNSSDSubTypes none
        DefaultShared No


        The first two should disable the automatic addition of printers shared on the network.




      5. Now start the CUPS service again, for example



        sudo service cups start







      share|improve this answer
























        1












        1








        1








        1. Stop the CUPS service (embodied by a process called cupsd), for example



          sudo service cups stop



        2. Open /etc/cups/cupsd.conf in your favorite editor, for example



          sudo vim /etc/cups/cupsd.conf



        3. Look if there is a line in this file saying



          Browsing  Yes


          and change this line to



          Browsing  No


          This should disable the sharing of your own print queues installed locally with the other computers in the same network. (I'm simply assuming you do not want this, given that you also do not want to 'see' other printers shared by other computers...)




        4. Likewise, make sure that file has the following lines:



          BrowseLocalProtocols  none
          BrowseDNSSDSubTypes none
          DefaultShared No


          The first two should disable the automatic addition of printers shared on the network.




        5. Now start the CUPS service again, for example



          sudo service cups start







        share|improve this answer














        1. Stop the CUPS service (embodied by a process called cupsd), for example



          sudo service cups stop



        2. Open /etc/cups/cupsd.conf in your favorite editor, for example



          sudo vim /etc/cups/cupsd.conf



        3. Look if there is a line in this file saying



          Browsing  Yes


          and change this line to



          Browsing  No


          This should disable the sharing of your own print queues installed locally with the other computers in the same network. (I'm simply assuming you do not want this, given that you also do not want to 'see' other printers shared by other computers...)




        4. Likewise, make sure that file has the following lines:



          BrowseLocalProtocols  none
          BrowseDNSSDSubTypes none
          DefaultShared No


          The first two should disable the automatic addition of printers shared on the network.




        5. Now start the CUPS service again, for example



          sudo service cups start








        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 24 '18 at 23:42









        Kurt Pfeifle

        47038




        47038






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f476372%2fhow-can-i-limit-engagement-with-a-large-office-lan%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Morgemoulin

            Scott Moir

            Souastre