Comment on How do you isolate a printer in your homelab?
pp99@sh.itjust.works 1 hour ago
- will block the printer but the app could still phone home
- may work but client devices should reach the printer in the vlan. also see point 1. best for other kind of iot devices
- best approach security wise but may take some work to it get running smoothly
What I would do:
- (easiest) block the printer and look what the client does. block any suspicious client behavior. you can use pihole to easily monitor/ block, later you can add firewall rules on your router
- (bit harder) your option number 3 if: you have a raspberry pi, your printer works well with sane and cups, you can set up clients to your desired workflow (having many non tech family members wanting to print will quickly become a nightmare)
rearview@lemmy.zip 42 minutes ago
Your 1. seems good enough as a starter, yeah. I’ll probably tell my users to ditch the app altogether otoh, so I’m looking forward to the Pi as a long-term solution
Though, what kind of non-tech nightmares are you referring to? I’d think that if being done properly and with autodiscovery enabled, it would be as seamless as “connect to printer/scanner X on the network” which is the Pi itself. But I probably haven’t understood enough