Post Reopened by Rоry McCune, AviD
3 Updated to clarify requirements and wording.
source | link

Security risk of a service that allows a user to test connectionfrom connectivity from a server forto a printer from client side

I wantWhat are the security risks in adding a feature to add an action that a user can use whenever he wantsapplication which allows users to test if myfor connectivity from a server can connect to a printer.?

I was wondering about security there. It'sI'm planning to add a tomcat (Java) server, like makingfeature to my server scanningapplication to allow users to click a button which will test whether the whole network himself and what kind of measureserver can i take against this ?

Note thatconnect to a printer. The button won't allow the user can only ask a connection test, he doesn'tto send any data, it's just a connect/disconnect onbut they will be able to specify the IP address and port of the printer to be connected to.

I'm concerned about the risks that a hostmalicious user might be able to use this feature to carry out network scanning from the server's perspective.

What would be some good controls to add to this kind of facility to minimize any security risks? For instance iexample, perhaps I could just allow the standardlimit it to a specific port number of the printers or let this toports which are used for printer configuration or limit the network administrator that will use my application ?function to only be usable by a privileged user.

Security risk of a service that test connection from server for a printer from client side

I want to add an action that a user can use whenever he wants to test if my server can connect to a printer.

I was wondering about security there. It's a tomcat (Java) server, like making my server scanning the whole network himself and what kind of measure can i take against this ?

Note that the user can only ask a connection test, he doesn't send any data, it's just a connect/disconnect on a host.

For instance i could just allow the standard port number of the printers or let this to the network administrator that will use my application ?

Security risk of a service that allows a user to test from connectivity from a server to a printer

What are the security risks in adding a feature to an application which allows users to test for connectivity from a server to a printer?

I'm planning to add a feature to my application to allow users to click a button which will test whether the server can connect to a printer. The button won't allow the user to send any data, but they will be able to specify the IP address and port of the printer to be connected to.

I'm concerned about the risks that a malicious user might be able to use this feature to carry out network scanning from the server's perspective.

What would be some good controls to add to this kind of facility to minimize any security risks? For example, perhaps I could limit it to a specific port or ports which are used for printer configuration or limit the function to only be usable by a privileged user.

2 deleted 42 characters in body; edited title
source | link

Adding Security risk of a bouton in an applicationservice that test connection from server for a printer from client side

I was wondering about security if iwant to add a "test connection" button (= exposing an url) onaction that a screen where youuser can manage printeruse whenever he wants to checktest if IP/Port/Shared Name can be seen from themy server can connect to a printer.

I was wondering about security there. It's a tomcat (Java) server. Like, like making my server scanning the whole network himself and what kind of measure can i take against this ?  

Note that the user can only ask a connection test, he doesn't send any data, it's just a connect/disconnect on a host.

For instance i could just allow the standard port number of the printers or let this to the network administrator that will use my application ?

Adding a bouton in an application that test connection from server for a printer

I was wondering about security if i add a "test connection" button (= exposing an url) on a screen where you can manage printer to check if IP/Port/Shared Name can be seen from the server. It's a tomcat (Java) server. Like making my server scanning the whole network himself and what kind of measure can i take against this ?  

Note that the user can only ask a connection test, he doesn't send any data, it's just a connect/disconnect on a host.

For instance i could just allow the standard port number of the printers or let this to the network administrator that will use my application ?

Security risk of a service that test connection from server for a printer from client side

I want to add an action that a user can use whenever he wants to test if my server can connect to a printer.

I was wondering about security there. It's a tomcat (Java) server, like making my server scanning the whole network himself and what kind of measure can i take against this ?

Note that the user can only ask a connection test, he doesn't send any data, it's just a connect/disconnect on a host.

For instance i could just allow the standard port number of the printers or let this to the network administrator that will use my application ?

    Migration Rejected
    Post Unlocked by Community
    Post Locked by Community
    Post Migrated Away to stackoverflow.com by Xander, Ohnana, Deer Hunter, Mark Buffalo, TildalWave
    Post Closed as "off-topic" by Xander, Ohnana, Deer Hunter, Mark Buffalo, TildalWave
1
source | link

Adding a bouton in an application that test connection from server for a printer

I was wondering about security if i add a "test connection" button (= exposing an url) on a screen where you can manage printer to check if IP/Port/Shared Name can be seen from the server. It's a tomcat (Java) server. Like making my server scanning the whole network himself and what kind of measure can i take against this ?

Note that the user can only ask a connection test, he doesn't send any data, it's just a connect/disconnect on a host.

For instance i could just allow the standard port number of the printers or let this to the network administrator that will use my application ?